Using cacls versus Gui properties->permissions

From: Brant G (brantg@mistermoney.com)
Date: 05/15/02


From: "Brant G" <brantg@mistermoney.com>
Date: Wed, 15 May 2002 08:30:53 -0600

I'm troubleshooting permissions on an NT4SP6a server for an IIS site, and
I've been using a batch file (below) to assign bulk permissions for the iis
folders, which uses cacls to edit the permissions. When I go to check out
the folder permissions through the Explorer Properties GUI, I don't see
these changes reflected, but they do show when I do a cacls for that folders
fiiles from the console, and I don't see any errors being reported from the
batch file. Any suggestions on what I'm doing wrong or misunderstanding?

<permiis.bat>
@Echo off
rem sets the accounts for iis access
rem expects the user|group:R for %1
rem I didn't include the :R as I wanted to be able to allow multiple
users|groups per line
echo y| cacls h:\corporate\lwintranet\*.* /t /e /g %1
echo y| cacls c:\winnt\*.* /e /g %1
echo y| cacls c:\winnt\system32\*.* /e /g %1
echo y| cacls c:\winnt\system32\inetsvr\*.* /t /e /g %1
echo y| cacls "c:\Program Files\Common Files\*.*" /t /e /g %1
echo y| cacls j:\storedata\stores\*.* /t /e /g %1
Echo Permissions set for %1 on IIS Directories

--
Brant Gluth
O'Boise Systems and Services
BrantG@OBoise.com
(970) 231-416

Tho' much is taken, much abides; and tho' We are not now that strength which in old days Moved earth and heaven: that which we are, we are; One equal temper of heroic hearts, Made weak by time and fate, but strong in will To strive, to seek, to find, and not to yield. Tennyson, "Ulysses"



Relevant Pages

  • RE: no OWA
    ... have the correct permissions was the "inetpub" folder. ... Correct the settings in IIS: ... click to check the "Hide All Microsoft Services" ...
    (microsoft.public.windows.server.sbs)
  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: FTP control
    ... > I would like to use NTFS security settings to control who ... I would suggest getting a third party FTP server, ... if you set quota and these permissions for that group you can ... Information Server (IIS) Web site, ...
    (microsoft.public.win2000.security)
  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... > permissions that you must have to run Internet Information Services ... > third-party applications in an IIS 5.0 environment. ... Open the properties for the %systemroot%\Winnt folder, ...
    (microsoft.public.inetserver.iis.security)
  • Re: Digest Authentication
    ... It sounds like IIS is having problems impersonating the IUSR account, ... In IIS, you do not need Script Source or Write permissions unless you ... But the Digest authentication for windows domain is ...
    (microsoft.public.inetserver.iis)