cacls scripting help

Sp00n · 3 Dec 2009 at 09:31

I need to create a script that goes through a a folder and all subfolders and removes the delete permission for all specified users and groups (except for administrators) and then add in creator owner with full permissions.

This should, in my theory, stop everyone from being able to move/delete files unless they created it initially.

Does that sound right? Does that sound like something that is possible using cacls?

Sp00n · 3 Dec 2009 at 12:40

So i need to use xcacls and not cacls?

Sp00n · 3 Dec 2009 at 17:18

Looking at that script, it seems to need specific usernames to work with the permissions.

I just want it to hunt through all of the folders, remove all delete permissions for explicit users and then add creator owner as full rights.

How do I do the first bit?

I would normally just do this manually but there are so many subfolders with various different levels of permissions for various different people that I need to automate it.

Sp00n · 4 Dec 2009 at 13:52

Basically the situation is I have a shared folder, under which has various different folders, some are open to everyone, some are open to specific people or specific groups.

So looking at what you said trojan, it can't be done because each folder has different permissions on it, ****

Sp00n · 7 Dec 2009 at 16:32

I was thinking I could potentially create a script for each user and run it, obviously each user is not on every folder so when it hits a folder where they aren't specified, does it just skip over it to the next one? ...cacls i mean.

That fileacl looks pretty handy but over-whelming at the same time, I'm not used to all this vbs stuff

sux2bme