Re: Set access rights using xcacls.vbs

You should be using the /spec switch
cscript xcacls.vbs /?
for syntax info

However, what you report is curious as the default spec
is This folder, subfolders and files

<joost.bouckenooghe@xxxxxxxxxx> wrote in message
news:1173367661.553972.106060@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi all

I want to lock most of our users out of creating folders. Only
teamleaders/managers are allowed to create folders. This way we hope
to force people using a clear structure instead of creating duplicates
all over the network.

We use a batch file where $1 equals the security group in AD and the
name of the folder for that division.

\\SERVER\d$\xcacls "G:\%~1\Private" /G "DOMAIN\Administrators":F;F
"DOMAIN\%~1-FC":M;M "DOMAIN\%~1":BA987654321;BA9865421 /I REMOVE

Administrators: ICT
$1-FC: teamleaders/management (can create folders)
$1: users who can delete write read execute files but cannot create
folders at all.
I use the REMOVE switch because the folder is created earlier on in
the script as well, and it takes over the security of the root folder.

This works like a charm except one tiny thing:
For $1 security is only set to "this folder only".

Is there anyone who has an idea on how to force xcacls.vbs to apply
all these settings to all files, folders and subfolders?

I'd be grateful :-)



.

Relevant Pages

  • RE: .net passport
    ... this folder. ... Switch to the Security tab, select Internet and click "Default Level". ...
    (microsoft.public.windowsxp.security_admin)
  • Workstation C: security settings
    ... The security settings on ... Administrator - Full Control: This folder, subfolders and files ...
    (microsoft.public.windowsxp.security_admin)
  • Workstation C: security settings
    ... The security settings on ... Administrator - Full Control: This folder, subfolders and files ...
    (microsoft.public.win2000.security)
  • Workstation C: security settings
    ... The security settings on ... Administrator - Full Control: This folder, subfolders and files ...
    (microsoft.public.win2000.active_directory)
  • Re: Where is my user?
    ... Now if I go into Docs and Settings, ... PetCareGroup is the folder that has all my docs, ... Keep in mind that when NTFS permissions and share ... I tried to switch it back to today ...
    (microsoft.public.windowsxp.help_and_support)