XCACLS utility help

From: Mark B (mark_at_mosaiccomputers.com.au)
Date: 01/29/05


Date: Sat, 29 Jan 2005 12:20:52 +1100

Hi all,

I work in a school environment, and have taken over administration of the
school's servers. I have just created over 1000 users and their assosciated
home folders.

I need to prevent users from deleting their own home folder (H:\<username>).
By default, when the folder is created, the user has this right.

Using XCACLS on a 2003 Server, what is the command to do this? I can ALLOW
each user the "special access" to DELETE the folder, but am unsure of the
switch to DENY the right. This is what I need to achieve:-

Denying the users the right to delete their home folder (but not
sub-folders), and
removing the "allow inheritable permissions" on the folder.

If I set the permissions using the GUI, and then run XCACLS, this is what is
reported:-

Processed directory FRED

D:\Users\FRED MyServer\FRED:(DENY)(special access:)
                                                    DELETE

                         Builtin\Administrators:(OI)(CI)F
                        MyServer\Fred:(OI)(CI)F

I cannot seem to replicate that "DENY" part of the special access! What is
the switch?!?!?

Many thanks,

Mark