Re: Adding multiple entries for the same user with xcacls...



It you are using /g for Principal with the /e switch it should
update the existing ACE/ACEs for Principal. If it can do
this by modifying the existing ACE/ACEs without adding
another, that would be expected.
You are apparently saying
ACE/ACEs before use of /g /e
+ intended grant via /g /e
does not equal ACE/ACEs for Principal afterwards.
??

"Condiment" <condiment@xxxxxxxxx> wrote in message
news:eV5VnJUzHHA.1204@xxxxxxxxxxxxxxxxxxxxxxx
I think I am still missing something.

Even running /E it still updates the existing entry instead of creating a
new one (different /SPEC syntax for each) for the group that I am granting
permissions to. Any ideas what I am misisng here?

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:OjvA0PpyHHA.748@xxxxxxxxxxxxxxxxxxxxxxx
"Condiment" <condiment@xxxxxxxxx> wrote in message
news:e6ROWXoyHHA.3564@xxxxxxxxxxxxxxxxxxxxxxx
Roger,
Thank you a million times. I briefly attempted the /E switch, but
when I received a syntax error, I just assumed I was heading down the
wrong path.

been there , guessing of syntax

What I failed to realize is that /E can be used with /G. You rock.

:)


Thank you again.

To you too - :)

--
ra

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:OQO7cunyHHA.3772@xxxxxxxxxxxxxxxxxxxxxxx
You appear to be overlooking the /e switch, which mean Edit the
existing grants for the principal rather than replacing them

<condiment@xxxxxxxxx> wrote in message
news:1184869275.987891.121480@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello,
Is there a way to add multiple entires for the same user using
xcacls? I am open to other suggestions, but here is what I need to
do...

I need to give Domain Admins specific access to "Subfolders and
Files".

I also need to give Domain Admins specific access to "This Folder
only"

When I use xcacls, the last command just overwrites the first... I
realize that /G replaces the existing settings, however I do not see
any options to accomplish what I need. If there is another tool to
accomplish this, I am open to other possibilities.

cscript xcacls.vbs test /I COPY /SPEC A /G "Domain Admins":618423B

cscript xcacls.vbs test /I COPY /SPEC E /G "Domain Admins":6184237AB

Thank you in advance










.