Re: Adding multiple entries for the same user with xcacls...

I am trying to say "grant specific security for GoupA to Subfolders and files only" and "grant specific security for GroupA to This folder only". I guess this is just not possible with xcacls. I really appreciate your response and understand that my responses are teetering on the edge of annoying at this point. I can tell you with all honesty I have read the -? command a dozen times and you are the only one responding, so thank you once again. If you know of any way to ADD a user or group twice with different security, that would help me a tremendously.

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message news:uMFQbWbzHHA.4004@xxxxxxxxxxxxxxxxxxxxxxx
It you are using /g for Principal with the /e switch it should
update the existing ACE/ACEs for Principal. If it can do
this by modifying the existing ACE/ACEs without adding
another, that would be expected.
You are apparently saying
ACE/ACEs before use of /g /e
+ intended grant via /g /e
does not equal ACE/ACEs for Principal afterwards.
??

"Condiment" <condiment@xxxxxxxxx> wrote in message news:eV5VnJUzHHA.1204@xxxxxxxxxxxxxxxxxxxxxxx
I think I am still missing something.

Even running /E it still updates the existing entry instead of creating a new one (different /SPEC syntax for each) for the group that I am granting permissions to. Any ideas what I am misisng here?

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message news:OjvA0PpyHHA.748@xxxxxxxxxxxxxxxxxxxxxxx
"Condiment" <condiment@xxxxxxxxx> wrote in message news:e6ROWXoyHHA.3564@xxxxxxxxxxxxxxxxxxxxxxx
Roger,
Thank you a million times. I briefly attempted the /E switch, but when I received a syntax error, I just assumed I was heading down the wrong path.

been there , guessing of syntax

What I failed to realize is that /E can be used with /G. You rock.

:)


Thank you again.

To you too - :)

--
ra

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message news:OQO7cunyHHA.3772@xxxxxxxxxxxxxxxxxxxxxxx
You appear to be overlooking the /e switch, which mean Edit the
existing grants for the principal rather than replacing them

<condiment@xxxxxxxxx> wrote in message news:1184869275.987891.121480@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello,
Is there a way to add multiple entires for the same user using
xcacls? I am open to other suggestions, but here is what I need to
do...

I need to give Domain Admins specific access to "Subfolders and
Files".

I also need to give Domain Admins specific access to "This Folder
only"

When I use xcacls, the last command just overwrites the first... I
realize that /G replaces the existing settings, however I do not see
any options to accomplish what I need. If there is another tool to
accomplish this, I am open to other possibilities.

cscript xcacls.vbs test /I COPY /SPEC A /G "Domain Admins":618423B

cscript xcacls.vbs test /I COPY /SPEC E /G "Domain Admins":6184237AB

Thank you in advance











.

Relevant Pages

  • Re: "Creator owner" permission
    ... "Roger Abell" wrote in message ... Only grant to This folder, subfolders, ... > Microsoft MVP (Windows Server System: Security) ...
    (microsoft.public.windows.server.security)
  • Re: Suggestion wanted
    ... Log in as an administrator and grant read access to your user. ... there another way besides going thru sharing security? ... can't be shared because it is a operating system folder. ... The "Sharing" tab is for granting remote access. ...
    (comp.security.firewalls)
  • Re: Suggestion wanted
    ... Log in as an administrator and grant read access to your user. ... there another way besides going thru sharing security? ... can't be shared because it is a operating system folder. ... The "Sharing" tab is for granting remote access. ...
    (comp.security.firewalls)
  • Re: Problem with security groups
    ... In addition to file sharing permission, be sure to grant the ... appropriate NTFS permission to that group under the folder properties ... -> Security tab, ...
    (microsoft.public.windows.server.sbs)
  • Re: How to set up a folder so that only the creator of a file can modify it?
    ... subfolders, and Files, This folder and files, Subfolders and Files only) ... Grant List to the group, access the Advanced view and highlight ... Modify but granting other than Full to Creator Owner is really just ...
    (microsoft.public.win2000.security)