XCACLS utility help

From: Mark B (mark_at_mosaiccomputers.com.au)
Date: 01/29/05 

Date: Sat, 29 Jan 2005 12:20:52 +1100

Hi all,

I work in a school environment, and have taken over administration of the
school's servers. I have just created over 1000 users and their assosciated
home folders.

I need to prevent users from deleting their own home folder (H:\<username>).
By default, when the folder is created, the user has this right.

Using XCACLS on a 2003 Server, what is the command to do this? I can ALLOW
each user the "special access" to DELETE the folder, but am unsure of the
switch to DENY the right. This is what I need to achieve:-

Denying the users the right to delete their home folder (but not
sub-folders), and
removing the "allow inheritable permissions" on the folder.

If I set the permissions using the GUI, and then run XCACLS, this is what is
reported:-

Processed directory FRED

D:\Users\FRED MyServer\FRED:(DENY)(special access:)
                                                    DELETE

                         Builtin\Administrators:(OI)(CI)F
                        MyServer\Fred:(OI)(CI)F

I cannot seem to replicate that "DENY" part of the special access! What is
the switch?!?!?

Many thanks,

Mark

Relevant Pages

  • Re: XCACLS utility help
    ... > each user the "special access" to DELETE the folder, ... > switch to DENY the right. ... > Denying the users the right to delete their home folder (but not ... > removing the "allow inheritable permissions" on the folder. ...
    (microsoft.public.windows.server.security)
  • AD problem with Microsoft Access
    ... This is a bizzare problem which only manifests itself in Microsoft Access. ... Sophos AV on all machines servers all 2003. ... All students have a unique username when logging in eg B92343. ... Why should hosting the home folder on fs01 rather than dc01 make a difference. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Use different home folder when connecting to different WTS farm
    ... Setup separate OUs for each farm of servers, then use loopback policy ... they logon to. ... We noticed some applications talk to users home folder ...
    (microsoft.public.win2000.termserv.apps)
  • Re: Cannot delete home folders of deleted users..
    ... I'm in the process of cleaning up home folder partitions of some ... servers. ... Quite a few user accounts have been deleted before actually deleting ...
    (microsoft.public.windows.server.general)
  • Re: IIS Website - Home Folder Replication
    ... > I'm looking to replicate a home folder for an IIS 6.0 web accross two ... > servers - any suggestions? ... Websites? ...
    (microsoft.public.inetserver.iis)