Re: Using cacls versus Gui properties->permissions
From: x y (jamescagney90210@excite.com)Date: 05/16/02
- Previous message: cmje: "Roaming user profile in NT delete and go for local user profile???"
- In reply to: Brant G: "Using cacls versus Gui properties->permissions"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "x y" <jamescagney90210@excite.com> Date: Thu, 16 May 2002 00:55:19 -0400
As long as CACLS shows the correct permissions, I don't think you're doing
anything wrong. CACLS has some known problems working on NTFS 5.0
partitions, which I believe is the case with partitiions under NT4 SP6 and
maybe SP4 and 5 as well. I think the problem has to do with support for
additional windows 2000 ACLs being added to NTFS but CACLS getting confused.
Sometimes I find that if I add or readd any permission in the gui, then
click OK and go back in, all the permissions have suddently appeared. The
two problems I see most often are the gui shows no one having any
permissions at all, or getting an error in the GUI that the ACLs are
incorrectly ordered and that the problem is being corrected. Some of these
issues are documented at www.microsoft.com/support
"Brant G" <brantg@mistermoney.com> wrote in message
news:BiuE8.12$cg.16900@news.uswest.net...
> I'm troubleshooting permissions on an NT4SP6a server for an IIS site, and
> I've been using a batch file (below) to assign bulk permissions for the
iis
> folders, which uses cacls to edit the permissions. When I go to check out
> the folder permissions through the Explorer Properties GUI, I don't see
> these changes reflected, but they do show when I do a cacls for that
folders
> fiiles from the console, and I don't see any errors being reported from
the
> batch file. Any suggestions on what I'm doing wrong or misunderstanding?
>
> <permiis.bat>
> @Echo off
> rem sets the accounts for iis access
> rem expects the user|group:R for %1
> rem I didn't include the :R as I wanted to be able to allow multiple
> users|groups per line
> echo y| cacls h:\corporate\lwintranet\*.* /t /e /g %1
> echo y| cacls c:\winnt\*.* /e /g %1
> echo y| cacls c:\winnt\system32\*.* /e /g %1
> echo y| cacls c:\winnt\system32\inetsvr\*.* /t /e /g %1
> echo y| cacls "c:\Program Files\Common Files\*.*" /t /e /g %1
> echo y| cacls j:\storedata\stores\*.* /t /e /g %1
> Echo Permissions set for %1 on IIS Directories
>
> --
> Brant Gluth
> O'Boise Systems and Services
> BrantG@OBoise.com
> (970) 231-416
>
> Tho' much is taken, much abides; and tho'
> We are not now that strength which in old days
> Moved earth and heaven: that which we are, we are;
> One equal temper of heroic hearts,
> Made weak by time and fate, but strong in will
> To strive, to seek, to find, and not to yield.
> Tennyson, "Ulysses"
>
>
- Next message: James Duong: "_Change Password permission for group"
- Previous message: cmje: "Roaming user profile in NT delete and go for local user profile???"
- In reply to: Brant G: "Using cacls versus Gui properties->permissions"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
