Adding user permissions to multiple subfolders

[Guest DukeN]

Hello,

 

This is a problem that I frequently run into and hope I can get some

advice on.

 

There are some shared folders, that have sub folders with non

inheriting permissions (different set).

 

I'll try to illustrate this with the following example:

 

Folder name Data has read only access for User A, B, C and so on

Subfolder DivisionA under this folder has full access for A (and no

other access)

Subfolder DivisionB has full access for user B (and no other access)

And so on...

 

Now I have user C who A, B, C ,etc report to asking for permissions to

subfolders DivisionA, DivisionB

 

Is there a way to add the access ACLs for user C to all subfolders

without manually going into the permissions for each folder?

 

Also, if someone can recommend a tool to report all ACLs in a folder

structure that would be appreciated as well.

 

Thanks in advance

[Guest lforbes]

RE: Adding user permissions to multiple subfolders

 

Hi,

 

Is this Windows 2003 or Windows 2000? I used xcacls.exe which is a utility

included with Microsoft. It views permissions and lets you set permissions

via batch file.

 

However, it makes more sense with Windows 2003 to enable inheritance on

subfolders and then on the main folder set the permission 'Users A, B, C' =

Read (This Folder Only).

 

With the "This Folder Only" permission it does not inherit to subfolders.

 

I have 2500 users in my Users Directory.

 

On the Upper Users Directory Folder I have the following permissions:

 

Administrators = Full Control, (This Folder, subfolders and files)

System = Full Control, (This Folder, subfolders and files)

Users = Read (This folder only)

SpecialUsers = Read (This Folder, subfolders and files) (for users who need

access to others accounts for different reasons.

 

What this does is give the users the ability to see all the folders but not

enter them unless they have full control on them.

 

Then with inheritance added all you have to do is add a users group to the

upper folder and they automatically have the permissions.

 

Cheers,

Lara

 

"DukeN" wrote:

> Hello,

>

> This is a problem that I frequently run into and hope I can get some

> advice on.

>

> There are some shared folders, that have sub folders with non

> inheriting permissions (different set).

>

> I'll try to illustrate this with the following example:

>

> Folder name Data has read only access for User A, B, C and so on

> Subfolder DivisionA under this folder has full access for A (and no

> other access)

> Subfolder DivisionB has full access for user B (and no other access)

> And so on...

>

> Now I have user C who A, B, C ,etc report to asking for permissions to

> subfolders DivisionA, DivisionB

>

> Is there a way to add the access ACLs for user C to all subfolders

> without manually going into the permissions for each folder?

>

> Also, if someone can recommend a tool to report all ACLs in a folder

> structure that would be appreciated as well.

>

> Thanks in advance

>

[Guest DukeN]

Re: Adding user permissions to multiple subfolders

 

Thanks for answering - this is server 2003. I'll look into that CL

util and see if that'll do the trick for me.

 

Unfortunately at this point I cant change the inheritance on the

folders for that would reset years of specific permissions on a lot of

subfolders.

 

Thanks again.

 

UnfortunatelyOn Mar 30, 4:44 pm, lforbes

<lfor...@discussions.microsoft.com> wrote:

> Hi,

>

> Is this Windows 2003 or Windows 2000? I used xcacls.exe which is a utility

> included with Microsoft. It views permissions and lets you set permissions

> via batch file.

>

> However, it makes more sense with Windows 2003 to enable inheritance on

> subfolders and then on the main folder set the permission 'Users A, B, C' =

> Read (This Folder Only).

>

> With the "This Folder Only" permission it does not inherit to subfolders.

>

> I have 2500 users in my Users Directory.

>

> On the Upper Users Directory Folder I have the following permissions:

>

> Administrators = Full Control, (This Folder, subfolders and files)

> System = Full Control, (This Folder, subfolders and files)

> Users = Read (This folder only)

> SpecialUsers = Read (This Folder, subfolders and files) (for users who need

> access to others accounts for different reasons.

>

> What this does is give the users the ability to see all the folders but not

> enter them unless they have full control on them.

>

> Then with inheritance added all you have to do is add a users group to the

> upper folder and they automatically have the permissions.

>

> Cheers,

> Lara

>

> "DukeN" wrote:

> > Hello,

>

> > This is a problem that I frequently run into and hope I can get some

> > advice on.

>

> > There are some shared folders, that have sub folders with non

> > inheriting permissions (different set).

>

> > I'll try to illustrate this with the following example:

>

> > Folder name Data has read only access for User A, B, C and so on

> > Subfolder DivisionA under this folder has full access for A (and no

> > other access)

> > Subfolder DivisionB has full access for user B (and no other access)

> > And so on...

>

> > Now I have user C who A, B, C ,etc report to asking for permissions to

> > subfolders DivisionA, DivisionB

>

> > Is there a way to add the access ACLs for user C to all subfolders

> > without manually going into the permissions for each folder?

>

> > Also, if someone can recommend a tool to report all ACLs in a folder

> > structure that would be appreciated as well.

>

> > Thanks in advance