Re: XCACLS utility help
From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 01/29/05
- Next message: Michael Sainz: "Computer Certificates"
- Previous message: BC: "Re: Adding DSL Router to existing Win2K Server and 3 clients"
- In reply to: Mark B: "XCACLS utility help"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 28 Jan 2005 22:41:28 -0700
xcacls.exe does not have that granularity available for deny
You could download xcacls.vbs which does allow for finer
control of special access ACEs, including denies, and will
do what you are attempting.
http://www.microsoft.com/downloads/details.aspx?FamilyID=0ad33a24-0616-473c-b103-c35bc2820bda&DisplayLang=en
-- Roger Abell Microsoft MVP (Windows Security) MCSE (W2k3,W2k,Nt4) MCDBA "Mark B" <mark@mosaiccomputers.com.au> wrote in message news:%23utBEDaBFHA.2076@TK2MSFTNGP15.phx.gbl... > Hi all, > > I work in a school environment, and have taken over administration of the > school's servers. I have just created over 1000 users and their assosciated > home folders. > > I need to prevent users from deleting their own home folder (H:\<username>). > By default, when the folder is created, the user has this right. > > Using XCACLS on a 2003 Server, what is the command to do this? I can ALLOW > each user the "special access" to DELETE the folder, but am unsure of the > switch to DENY the right. This is what I need to achieve:- > > Denying the users the right to delete their home folder (but not > sub-folders), and > removing the "allow inheritable permissions" on the folder. > > If I set the permissions using the GUI, and then run XCACLS, this is what is > reported:- > > Processed directory FRED > > D:\Users\FRED MyServer\FRED:(DENY)(special access:) > DELETE > > Builtin\Administrators:(OI)(CI)F > MyServer\Fred:(OI)(CI)F > > I cannot seem to replicate that "DENY" part of the special access! What is > the switch?!?!? > > Many thanks, > > Mark > >
- Next message: Michael Sainz: "Computer Certificates"
- Previous message: BC: "Re: Adding DSL Router to existing Win2K Server and 3 clients"
- In reply to: Mark B: "XCACLS utility help"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
