Re: XCACLS causes error in permissions

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 06/21/04 

Date: Mon, 21 Jun 2004 01:27:26 +0200

Lucvdv wrote:

> After using xcacls from the resource kit to change permissions on a
> folder and its contents, explorer reports an error on the permissions.
> This happens in XP as well as Win2000.
>
> [Xcacls should be the same as cacls, with the exception of an added
> "/Y" switch to make it easier to use from a batch file].
>
> What I did was grant access to one account, and revoke (deny) it for
> another:
>
> xcacls <path> /T /E /G User1:F /Y
> xcacls <path> /T /E /D User2 /Y
>
> After executing these commands through wshShell.Run in a script,
> opening the security tab in the folder's properties (or any item
> within it) causes this message to appear:
>
> The permissions on <name> are incorrectly ordered, which may cause
> some entries to be ineffective. Press OK to continue and sort the
> permissions correctly, or Cancel to reset the permissions.
Hi

An alternative that works better:

SetACL.exe (freeware) at
http://setacl.sourceforge.net/

SetACL can set permissions on:

Local or remote directories
Local or remote files
Local or remote printers
Local or remote registry keys
Local or remote Win32 services
Local or remote network shares 

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/community/scriptcenter/default.mspx

Relevant Pages

  • Re: RWW
    ... the only difference is the NTFS permissions on the ... In fact the metabase need password only when restore to local server. ... The problem may be caused by corrupt Remote virtual directory, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW - Local Policy connect to desktop issue
    ... particular user account, but I've got no idea what it could be after ... permissions as well as the replace permissions. ... I see is in the logon script. ... properties and enabled the Remote Desktop service. ...
    (microsoft.public.windows.server.sbs)
  • Re: XCACLS causes error in permissions
    ... explorer reports an error on the permissions. ... > [Xcacls should be the same as cacls, with the exception of an added ... Local or remote directories ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Looking for a VB Script to set share permissions
    ... > SetSecurityDescriptor Method in Class Win32_LogicalShareSecuritySetting ... > Local or remote directories ... > Be sure to add permissions, ... > Microsoft MVP Scripting and WMI, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Script needed: Users with Remote Access permissions on a server
    ... Remote Access permissions on a server? ... I need to query a particular server or list of servers. ... Microsoft MVP Scripting and ADSI ...
    (microsoft.public.scripting.vbscript)