CDACLS.EXE Correct Inherited filesystem

From: Daniel Nast (dnast@gmx.ch)
Date: 03/26/03

  • Next message: Kelly: "Disabling Internet access with Active directory" 
    From: "Daniel Nast" <dnast@gmx.ch>
Date: Wed, 26 Mar 2003 12:05:29 +0100

    The cacls, xcacls, subinacl or...or,or tools can't handle the Discretionary
    ACL. !!! You now this?

    If you remove a user with ony of this tools, the ACL ControlFalg is missing
    the SE_DACL_AUTO_INHERITED. The SE_DACL_PROTECTED is correct set, but all
    ACE's (users) have not loos the (im inherited) flag.

    The Result are very bad!!!

    I have programmed a Tool that handels all things correct..
    and many more.

    Send my a mail and i send you CDACLS.EXE for analys or correct the problem.

  • Next message: Kelly: "Disabling Internet access with Active directory"

    Relevant Pages

    • Re: Security translation with ADMT 3
      ... with subinacl it is possible to change rights for kernelobjects and IIS ... I don't know whether I have to change rights for kernelobjects and IIS ... situation) to test metabase ACL don't works in my environment. ... you check the permission before you perform the intra-forest migration, ...
      (microsoft.public.windows.server.migration)
    • RE: Add or modify ACL on folder after using FSMT
      ... you may use subinacl to replace the ACL. ... type subinacl /help at the command line. ... | access any folders after User_a login to the domain. ...
      (microsoft.public.windows.server.migration)
    Loading