Hello,

This is a problem that I frequently run into and hope I can get some
advice on.

There are some shared folders, that have sub folders with non
inheriting permissions (different set).

I'll try to illustrate this with the following example:

Folder name Data has read only access for User A, B, C and so on
Subfolder DivisionA under this folder has full access for A (and no
other access)
Subfolder DivisionB has full access for user B (and no other access)
And so on...

Now I have user C who A, B, C ,etc report to asking for permissions to
subfolders DivisionA, DivisionB

Is there a way to add the access ACLs for user C to all subfolders
without manually going into the permissions for each folder?

Also, if someone can recommend a tool to report all ACLs in a folder
structure that would be appreciated as well.

Thanks in advance

Hi,

Is this Windows 2003 or Windows 2000? I used xcacls.exe which is a utility
included with Microsoft. It views permissions and lets you set permissions
via batch file.

However, it makes more sense with Windows 2003 to enable inheritance on
subfolders and then on the main folder set the permission 'Users A, B, C' =
Read (This Folder Only).

With the "This Folder Only" permission it does not inherit to subfolders.

I have 2500 users in my Users Directory.

On the Upper Users Directory Folder I have the following permissions:

Administrators = Full Control, (This Folder, subfolders and files)
System = Full Control, (This Folder, subfolders and files)
Users = Read (This folder only)
SpecialUsers = Read (This Folder, subfolders and files) (for users who need
access to others accounts for different reasons.

What this does is give the users the ability to see all the folders but not
enter them unless they have full control on them.

Then with inheritance added all you have to do is add a users group to the
upper folder and they automatically have the permissions.

Cheers,
Lara

"DukeN" wrote:

Thanks for answering - this is server 2003. I'll look into that CL
util and see if that'll do the trick for me.

Unfortunately at this point I cant change the inheritance on the
folders for that would reset years of specific permissions on a lot of
subfolders.

Thanks again.

UnfortunatelyOn Mar 30, 4:44 pm, lforbes
<lfor...@discussions.microsoft.com> wrote: