Re: Creating Directories without AUTO Parent Propagation?

From: Fern0 (fernando@altamira.com)
Date: 06/06/02 

From: "Fern0" <fernando@altamira.com>
Date: Thu, 6 Jun 2002 09:38:25 -0400

I figured it out on my own thanks everyone ..
If the parent directory has any specific user settings .. then every folder
created below it
will have the inherit propagation checked off.

How can you avoid this ... Easy. The parent folder has to have " Everyone "
with full permissions ..
Then all new sub folders created below that folder will not have propagation
enabled ...

"Fern0" <fernando@altamira.com> wrote in message
news:wf8L8.21065$Z6.238320@nnrp1.uunet.ca...
> I'm running a little DOS batch script in a windows2000
> environment to create directories with specific NTFs user
> rights. As you can see the below script first does as follows..
> (script at end of this message)
>
> Line1: Create the directory
> Line2: Edit permission .. adding a domain user rights.
> Line3: Edit permission .. adding administrators rights.
> Line4: Edit permission .. removing the "everyone" entry completly.
>
> The entire script is not attached below obviously but it
> does work fine. My problem is the check box which Allows inheritable
> permissions from Parent to propagate to this object is still
> highlighted on the individual directories created. This being a
> problem becuase the parent directory does have read permissions
> for everyone, and yes I want everyone to read/list the parent
> directory.
>
> Now the funny thing is that if you did this manually you would
> not be able to remove everyone user from this folder.. unless you
> remove the the check / propagate from parent option.. and then copy
> the NTFS permissions... then removing the everyone entry.
>
> The script will remove the everyone from theuser rights field, and
> yet the propagate check box is still checked. I noticed that the
> everyone entry will not appear unless the server is restarted.
>
> Some more information: If I use this script to target my personal
> 2000 workstation (eg. c:\home) the propagate check box is not checked
> which is perfect. But when I target a 2000 server (eg.
> \\servername\d$\home)
> The propagate option is checked. Note: the home directory on the
> server has identical permisions as the one on my C: drive. And yes
> I am a domain admin while running this script.
>
> Making a long story short.. Is there a way using CACLS or any other
> command to force NO allowance of the parent folder propagation while
> createing them with this script??
>
> Thanks alot .. I really hope there is someone out there that can help me.
>
> Please feel free to respond via email: fernando@altamira.com
>
>
> ---- Actual Script ----
> md %newdirectory%
> cacls %newdirectory% /e /g %1% %@domain% %:c%
> cacls %newdirectory% /e /g administrators%:f%
> cacls %newdirectory% /e /r everyone
> -----------------------
>
>

Relevant Pages

  • Re: Creating Directories without AUTO Parent Propagation?
    ... If the parent directory has any specific user settings .. ... Then all new sub folders created below that folder will not have propagation ... As you can see the below script first does as follows.. ... > remove the the check / propagate from parent option.. ...
    (comp.os.ms-windows.nt.admin.security)
  • "Allow inheritable permissions" checkbox is unchecked...
    ... "Allow inheritable permissions from the parent to propagate to this object ... Do I have to go through the entire folder structure and look at the property ...
    (microsoft.public.windows.server.security)
  • Re: All folders within a folder show their contents as List: How to?
    ... I understand what you wanted, but if you have 100 subfolders, isn't it worth it to change the parent ... But if you're not in a big hurry, hold on, I've realized a better way to implement the script. ... I have folder A that contains folders x, ...
    (microsoft.public.windowsxp.general)
  • Re: Sharing security...allow all computers except one
    ... Under "You are preventing any inheritable permission from parent to propagate to this object. ... Remove everyone and any groups or users you don?t want them access this folder while adding groups and users you want to have permissions to access the subfolder. ...
    (microsoft.public.win2000.networking)
  • How to Block the Inherit permisson on new created folder by script
    ... I have to create a lot of folder by the script.However,I also want to clear the ... "Allow inherit permission from parent to propagate to this object" for each ...
    (microsoft.public.scripting.vbscript)