Re: Modify NTFS ACL?

From: Roli Wandfluh (roland.wandfluh@gmx.ch)
Date: 06/11/02 

From: Roli Wandfluh <roland.wandfluh@gmx.ch>
Date: Tue, 11 Jun 2002 20:39:58 +0200

Hi Lex

Thanks for your tip with SUBINACL. I didn't know this utility. I will
try that tomorrow.
Does anybody know a tool, where I can dump the whole ACL structure
from a Directory path into an editable file. Modify it and afterwards
write it back to the directory path.

That would be very helpfully

Roli.

On Tue, 11 Jun 2002 20:33:40 +0200, "Lex jansen" <lex@lex-jansen.demon
nl> wrote:

>Another thing you should do, is setting a maximum of CHANGE on the
>file-share,
>otherwise if a user is the owner of a file he or she is still able to change
>the permissions.
>
>You can take ownership with the Resource Kit utility SUBINACL.
>(example: subinacl /subdirectories x:\*.* /setowner=mydomain\userx)
>This a VERY powerful tool, and dangerous if you do not use it right.
>
>Lex Jansen
>
>
>"Roli Wandfluh" <roland.wandfluh@gmx.ch> wrote in message
>news:3d04ea04.9533187@news.tiscalinet.ch...
>> Hi
>>
>> I have the following problem: We have a file-share, where the users
>> store their files. The wrong thing was that, that we gave the users
>> full-access to their files and directories. Now, some users did delete
>> on some directories and files the domain-admin group. That means, that
>> the admin has no rights now to these directories and files. That's
>> really very bad. Because we would like to make a new server and copy
>> (robocopy) the whole shares to the new server. But on the files
>> without the domain-admin, robocopy will get 'Access denied'.
>> My question is the following: Is there a possibility (Microsoft or
>> third party program), which allows to add the domain-admin to the ACL
>> of the whole NTFS structure. But the importing thing is, I want to add
>> this group and leave the other security as it is.
>>
>> If you have any idea, please write me an eMail to:
>>
>> roland.wandfluh@gmx.ch
>>
>> Any help would be appreciated.
>>
>> Thanks
>>
>> Roland Wandfluh
>>
>> Many greetings to the whole world from Switzerland
>

Relevant Pages

  • Re: Modify NTFS ACL?
    ... Thanks for your tip with SUBINACL. ... Because we would like to make a new server and copy ... >> without the domain-admin, robocopy will get 'Access denied'. ...
    (comp.os.ms-windows.nt.admin.security)
  • Modify NTFS ACL?
    ... on some directories and files the domain-admin group. ... Because we would like to make a new server and copy ... without the domain-admin, robocopy will get 'Access denied'. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Modify NTFS ACL?
    ... > I have the following problem: We have a file-share, ... Because we would like to make a new server and copy ... > without the domain-admin, robocopy will get 'Access denied'. ...
    (comp.os.ms-windows.nt.admin.security)
  • Modify NTFS ACL?
    ... on some directories and files the domain-admin group. ... Because we would like to make a new server and copy ... without the domain-admin, robocopy will get 'Access denied'. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Modify NTFS ACL?
    ... > I have the following problem: We have a file-share, ... Because we would like to make a new server and copy ... > without the domain-admin, robocopy will get 'Access denied'. ...
    (comp.os.ms-windows.nt.admin.security)