Re: Modify NTFS ACL?

From: Slim (simon.cryer@ltsbasset.co.uk)
Date: 06/11/02


From: simon.cryer@ltsbasset.co.uk (Slim)
Date: 11 Jun 2002 00:54:45 -0700

roland.wandfluh@gmx.ch (Roli Wandfluh) wrote in message news:<3d04ea04.9533187@news.tiscalinet.ch>...
> Hi
>
> I have the following problem: We have a file-share, where the users
> store their files. The wrong thing was that, that we gave the users
> full-access to their files and directories. Now, some users did delete
> on some directories and files the domain-admin group. That means, that
> the admin has no rights now to these directories and files. That's
> really very bad. Because we would like to make a new server and copy
> (robocopy) the whole shares to the new server. But on the files
> without the domain-admin, robocopy will get 'Access denied'.
> My question is the following: Is there a possibility (Microsoft or
> third party program), which allows to add the domain-admin to the ACL
> of the whole NTFS structure. But the importing thing is, I want to add
> this group and leave the other security as it is.
>

Roland,
As Domain Admin, start by trying to Take Ownership of
files/directories where your rights have been removed. As the owner,
you should then be able to change the ACLs.
I don't know about 3rd-party tools, but you could then use xcacls from
the NT Resource Kit to edit (instead of replace) the ACL for each
directory/subdirectory. The doc that comes with it describes all of
the switches to use to do what you need to do.

Good luck.



Relevant Pages

  • Re: Modify NTFS ACL?
    ... Because we would like to make a new server and copy ... > without the domain-admin, robocopy will get 'Access denied'. ... which allows to add the domain-admin to the ACL ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Modify NTFS ACL?
    ... Thanks for your tip with SUBINACL. ... Because we would like to make a new server and copy ... >> without the domain-admin, robocopy will get 'Access denied'. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Modify NTFS ACL?
    ... Thanks for your tip with SUBINACL. ... Because we would like to make a new server and copy ... >> without the domain-admin, robocopy will get 'Access denied'. ...
    (comp.os.ms-windows.nt.admin.security)
  • Modify NTFS ACL?
    ... on some directories and files the domain-admin group. ... Because we would like to make a new server and copy ... without the domain-admin, robocopy will get 'Access denied'. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Modify NTFS ACL?
    ... > I have the following problem: We have a file-share, ... Because we would like to make a new server and copy ... > without the domain-admin, robocopy will get 'Access denied'. ...
    (comp.os.ms-windows.nt.admin.security)