Re: Applying NTFS Permissions is Slow

On Nov 19, 6:42 am, "Jacob" <jacob(AT)hfws.net.nospam> wrote:
Any takers??

"Jacob" <jacob(AT)hfws.net.nospam> wrote in message

news:41D12D83-75DC-41A0-9580-ABE5AF4A8D58@xxxxxxxxxxxxxxxx



Hi all,
Migrating several large volumes from Novell to Microsoft and I've run into
some issues applying security rights. We have a script that turns the
volumes_trustee file into a set of icacls.exe commands. Trouble is when
setting a permissions on a folder that is high up in a directory tree that
is
very deep the permissions take a VERY long time to apply.

This is most obvious when setting permissions on a root level folder such
as
D:\Shared. Adding a single ACE on a root level folder is taking several
hours
to complete.

This is too slow. Are there any solutions to this issue?
--
**********************
Jacob- Hide quoted text -

- Show quoted text -

NTFS ACLS are optimized in many cases. Changing a root ACL could cause
the system to have to change the ACL on every folder and file under
that root object. How many objects are in those folders are we talking
about?

Dave
.

Relevant Pages

  • Re: Page and Images not found on Localhost
    ... I didn't know that even images could be declared as server controls. ... which may not have been declared as a server control. ... I designated the "project" folder as an application in IIS. ... is the root for anything under it. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: File Sharing (again - sorry, Pd)
    ... The specific problem is that some applications save new documents by ... creating them in a temporary folder, then move them into the folder ... A file moved into a folder doesn't inherit the ACL from the folder. ... Assuming other applications behave similarly to the patterns of either ...
    (uk.comp.sys.mac)
  • Trouble with XCACLS.VBS and denying Execute access
    ... Full Control (This Folder, Subfolders and Files) ... If I change the permissions to look like those above through the GUI, ... The first line REPLACES the ACL for the current user with the Full Cont ...
    (microsoft.public.security)
  • Re: Virtual Directory, Paths, Local and Deployed Problem
    ... If you are looking to get to the /images folder from the root. ... In production: http://www.site1.com/images/mygif.gif ... make this a virtual folder in IIS. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Thinking outside the box on file systems
    ... The "/private" directory is readable only by root, since root is the only one who will be navigating you into these chroots for any reason. ... You only switch UID/GID after the chroot() call, at which point you are inside of a sub-context and your cwd is fully accessible. ... If you stick an inheritable ACL on "/private", then the "cwd" ACL will not allow access by anybody but root and my bind won't be able to read any config files. ... Say I untar 20 kernel source trees and then have my program open all 1000 available FDs to various directories in the kernel source tree. ...
    (Linux-Kernel)
Quantcast