Re: XCACLS and Home Folder?
From: x y (jamescagney90210@excite.com)
Date: 05/15/02
- Next message: Tony Bowman: "Disabling Non-essential Services"
- Previous message: steve hamilton: "Removing Inheritable Permissions"
- In reply to: Greg M. Topf: "Re: XCACLS and Home Folder?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "x y" <jamescagney90210@excite.com> Date: Wed, 15 May 2002 10:43:07 -0400
1) Can I use xcacls or cacls to strip all permissions off of the home
folders except the owner's? Can I use any wildcard for that?
I would try CACLS /T /C /G domain\owner:W
[this removes all permissions except Write permissions for owner. There may
be a security context relating to creator/owner in a domain, but there is
none on my 2000 workstation outside of the domain. If there's no
creator/owner security context, then you'll have to replace Owner with the
actual login ID of the user that owns the folder, e.g. by a batch file or
other script.]
2) Can I use xcacls to just remove the full control attribute and leave
everybody at modify on their own folders?
CACLS /T /E /C /P domain\user:W
[this edits the existing permissions for user and replaces them with Write
permissions.]
CACLS /T /E /C /G domain\user:W
[this edits the existing permissions to grand the user Write permissions. I
might recommend this instead of the above command as this is sure to apply
permissions to every file and subdirectory in the folder.]
In either case you'll need to replace user with the actual user ID
associated with the folder. Hope I understood the question.
"Greg M. Topf" <greg@nospam.here> wrote in message
news:Od7nyrB$BHA.2420@tkmsftngp02...
> Yes, and that really doesnt help me with how to deny a specific group....I
> see grant....
>
> --
>
> Greg M. Topf
> MCSE, CCNA
> greg@nospam.gregsapartment.com
> "x y" <jamescagney90210@excite.com> wrote in message
> news:#FNZrZA$BHA.2308@tkmsftngp02...
> > I'm sure in your studies to become MCSE and CCNA you must have run
across
> > the /? switch ?
> >
> > "x y" <jamescagney90210@excite.com> wrote in message
> > news:uFlxD$6#BHA.1680@tkmsftngp04...
> > >
> > >
> > > "Greg M. Topf" <greg@nospam.here> wrote in message
> > > news:uiDFhC4#BHA.1696@tkmsftngp05...
> > > > Ill ask the question I asked earlier...
> > > > Can you throw me a more detailed syntax?
> > >
> > > CACLS /? should tell you all you need to know.
> > >
> > > CACLS /T /E /C /G domain\users:f
> > >
> > > /t = subdirectories included in the changes
> > > /e = edit the existing permissions [default is to replace them]
> > > /c = continue if an error occurs
> > > /g = grant
> > > /r = revoke
> > >
> > >
> >
> >
> >
> >
>
>
- Next message: Tony Bowman: "Disabling Non-essential Services"
- Previous message: steve hamilton: "Removing Inheritable Permissions"
- In reply to: Greg M. Topf: "Re: XCACLS and Home Folder?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
