Method to remove permissions from files (not folders) for single g

Method to remove permissions from files (not folders) for single g

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Method to remove permissions from files (not folders) for single g Jo Winchester 03-03-2006
Posted by =?Utf-8?B?Sm8gV2luY2hlc3Rlcg== on March 3, 2006, 5:18 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I am try to automate the removal of the DENY - WRITE permissions for a
specified AD group that has been explicitly applied to files.

This must be done with the without touching the folder structure and
inheritance must not be turned off

The files are sitting in a hierarchical folder structure - that is 4 folders
deep, and there are multiple folders. They relate to dates - so the levels
of the folders are:

Top Level (Shared folder)
Year (folder)
Month (folder)
Day (folder)
File.file (Files)

I have been experimenting with XCACLS, but am having difficulty in making it
only look at the files - not the actual folders.





Posted by Roger Abell [MVP] on March 3, 2006, 8:16 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Go to microsoft.com/downloads and search for xcacls.vbs as it
has greater flexibility than cacls.exe or xcacls.exe
Use xcacls.vbs /? for syntax, not just the KB you will see a
reference to, as the internal has some info omitted in the KB
If you cannot do it with repeated calls to xcacls.vbs then the
VBscript code would certainly provide example of how to
copy and replace a SD, how to hind and omit an ACE, so
you would only need to wrapper that in a folder recurse that
applies the routine to all files at each folder.

>I am try to automate the removal of the DENY - WRITE permissions for a
> specified AD group that has been explicitly applied to files.
>
> This must be done with the without touching the folder structure and
> inheritance must not be turned off
>
> The files are sitting in a hierarchical folder structure - that is 4
> folders
> deep, and there are multiple folders. They relate to dates - so the
> levels
> of the folders are:
>
> Top Level (Shared folder)
> Year (folder)
> Month (folder)
> Day (folder)
> File.file (Files)
>
> I have been experimenting with XCACLS, but am having difficulty in making
> it
> only look at the files - not the actual folders.
>
>
>
>



Similar ThreadsPosted
Modify/Write Permissions on Files & Folders July 13, 2005, 3:51 pm
Remove all permissions from folder February 13, 2006, 5:25 am
All permissions removed from folders July 5, 2006, 12:08 pm
Permissions Removed from Folders July 5, 2006, 2:22 pm
folder permissions on folders January 16, 2007, 3:40 pm
Folders and files security October 9, 2005, 5:33 pm
Do I need to "take ownership" of the folders and files? February 13, 2006, 3:38 pm
System Administrator cannot access files/folders January 12, 2006, 4:38 pm
Strange Windows 2000 / 2003 behavior found with ASPNET permissions on MachineKeys folders?!? July 5, 2005, 11:29 am
How can I get access to files and folders on my portable drive on other computers? July 12, 2005, 3:46 am

The site map in XML format XML site map

Contact Us | Privacy Policy