Re: icacls or subinacl

I apperiacte the involved response...however forget the why I want to do something and just look at the task. I want to use xcacls, subinacl, icacls, cacls to collect the permissions of all files and folders of a directory by pointing it at the drive letter and saying go.

Dont worry about whether something gets deleted, a user can change permissions, etc. I am wanting to do x.

If you can help with this it woudl be appreciated. All I can see is that all the above tools only backup permissions of a particular root directory, not the entire drive.

Thanks



"Al Dunbar" <AlanDrub@xxxxxxxxxxxxxxxxxxx> wrote in message news:e5KL3mZpIHA.1420@xxxxxxxxxxxxxxxxxxxxxxx
If I understand you correctly, you are not interested in restoring the *content* of the files in question, but only in restoring the *permissions* of those files to a previous state. This seems a bit nonsensical, as if users can change permissions, they are likely to delete, rename, or move files too.

It would be somewhat tricky to restore permissions to such a set of files, given that some of them might no longer exist. Even assuming this were not the case, your script would need to:

- collect a listing of the current permission settings (easily done with cacls.exe)
- parse through the listing to determine what permissions to apply to the files.

I rather suspect that you want to backup the content, folder hierarchy, and permissions of a set of files. If that is so, neither cacls nor subinacl will do, at least they will not do *all* of the work.

Your options include acquiring a software product designed to perform data backups or using ntbackup.exe. In either case, there is a relationship between the available products and the media on which they can do their backups. Another option would be to write a script to create a copy of the data on another, perhaps removable, storage volume. This could be done using xcopy, robocopy, xxcopy, or a variety of others. With robocopy, and assuming the backup volume was formatted with NTFS, there would be no need to use cacls to save a listing of the permissions, as the permissions could simply be copied from the source to the backup media.

If the backup mechanism were incapable of including the permissions, then you could use cacls to save this, and then write a script to parse that and re-apply the permissions to any files you need to restore.

So I'll ask again: do you want your backup system to backup file data as well as the permissions? and where and in what format do you intend to store the backups (tape, disk, .zip file, other)?


/Al

"Todd Hudson" <tatung70@xxxxxxxxxxx> wrote in message news:usb1%23EPpIHA.4736@xxxxxxxxxxxxxxxxxxxxxxx
All I want is to create a file that has all ntfs permissions in it that I can then restore if needed.



"Al Dunbar" <AlanDrub@xxxxxxxxxxxxxxxxxxx> wrote in message news:O0HaXpOpIHA.1580@xxxxxxxxxxxxxxxxxxxxxxx

"Todd Hudson" <tatung70@xxxxxxxxxxx> wrote in message news:69D2720B-577D-447A-BDB5-F3408E097C31@xxxxxxxxxxxxxxxx
I am trying to figure out a way to backup the entire drive (D, E, etc) of a
Windows 2003 server. I tried looking at the syntax for subinacl and icacls,
but either I could not figure it out or it just did not work.

Can anyone help?

I assume you are thinking of using subinacl and icacls to extract ownership/ntfs permission information in order to store it with the data so that your restore script, program, or whatever, can re-apply the original permissions that restored files previously had. That's fine, but I do no think either utility will actually create a copy of the files themselves. I'm not sure what to suggest here, as I do not know if you are doing a tape backup, an image copy to a removable drive, or across the LAN to a storage device.

/Al






.

Relevant Pages

  • RE: Since SP1 install auto backup failing
    ... BackUp is working however 3 complete in a row without any errors is the most ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ... >>> permission and the Launch permissions. ...
    (microsoft.public.windows.server.sbs)
  • Re: backup wizzard error
    ... i run the backup wizzard. ... Choose "Customize" under Launch and Activation Permissions. ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: icacls or subinacl
    ... So, you want to use xcacls, subinacl, icacls, cacls (or presumably other ... information is to be used later to "restore" the permissions. ... None of these utilities appear to me to be designed for "backup" purposes. ...
    (microsoft.public.windows.server.security)
  • Re: icacls or subinacl
    ... The switch you describe will only backup the specified directory permissions and everythgi below there. ... If I backup the permissions only to a file, then later I can restore them if something changes.Again, lets stay focused on what the goal is instead of trying to troubleshoot what happens if a directory gets deleted, etc. ... So, you want to use xcacls, subinacl, icacls, cacls to "collect" the permissions. ...
    (microsoft.public.windows.server.security)
  • Re: Folder/File Rights before SBS 2003 Migration
    ... I agree with MCTrainer on this, far easier to make the NT Backup (or your ... favorite software) provide the restore with the correct permissions. ... Performing an SCOPY or an XCOPY ...
    (microsoft.public.windows.server.sbs)