Re: File Permissions on NTFS share

From: Herb Martin (news_at_LearnQuick.com)
Date: 02/19/04 

Date: Thu, 19 Feb 2004 00:21:51 -0600

"Scott Micale" <smicale@hartvillehardware.com> wrote in message
news:eV#nnGn9DHA.1472@TK2MSFTNGP11.phx.gbl...
> I have a share that I have created for my users and I want to put
> permissions on the sub folders so that the user can:
>
> Do anything in a subfolder except delete files and folders. I am
struggling
> to get this setup and it should not be that hard. The share resides on a
> NT4 BDC, but I am setting the permissions from a 2003 DC. Can someone
give
> me the best options?

NT has all the features for permission that you NEED, but it lacks the
protection
that discourages re-applying inherited permissions accidentally.

The TRUTH: No one I know sets SECURE permissions completely correctly (for
their own needs) unless they use batch jobs or some sort of third party
management
console equivalent (ok, maybe GPO but they probably start with a batch
file.)

Permissions are easy to set; hard to maintain; especially when need for
changes or
mistakes are discovered.

Learn to use Cacl.exe Xcacl.exe and (if your stubborn) SetAcl.exe from
Sourceforge
and write a batch file that sets the permissions. General first with
propagation (inheritance
reset) and then specific in each sub-directory tree with or without
propagation; then
finally any exceptional files or directories that much be different from
what you
set above.

Now you can change the batch file and re-apply in just a few minutes.

It's the right thing to do. 

-- 
Herb Martin
>
> Thanks!
>
>

Relevant Pages

  • Re: System.Diagnostics.Process not working !! please help
    ... You must be having permissions problem. ... batch file is and goto the "security" tab, add the ASPNET user in it and ... >> missing using statements. ... >>> catch (Exception err) ...
    (microsoft.public.dotnet.languages.csharp)
  • .NET Deployment: Minimum Customer Effort
    ... J# Browser Controls. ... Configuration tool and giving the required permission level based on ... I've started to look at writing a batch file that uses Caspol.exe to ... agree to the permissions demanded by our code? ...
    (microsoft.public.dotnet.security)
  • Re: Cannot Execute Batch File
    ... I have given full permissions for the shortcut. ... The error says that I do not have permissions to execute this file. ... We have newly installed a Terminal Server. ... with a Batch file, that is shared on a different Server. ...
    (microsoft.public.windows.terminal_services)
  • Re: Install of Management Studio fails with SMS
    ... If you have not already tried you could ask in the SMS newsgroups. ... >> should work through sms...if it is a permissions issue, ... >> Also I have tried putting this command in a batch file which SMS doesn't ... >>> John ...
    (microsoft.public.sqlserver.setup)
  • Re: Login Script Trouble
    ... I figured this one out with regards to why the batch file didn't ... inherit the permissions from the scripts folder. ...
    (microsoft.public.windows.server.general)