Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Permissions on NTFS with a file system

Mar 7, 2004 6:50PM PST

I have many permissions all stemming back to the root of a drive. Is there any way to hard-set all the permissions so i can change the root of the drives permissions and not every folder that inherits from this root?

Using Win 2k Server, SP4.

Thank You

Discussion is locked

- Collapse -
Re:Permissions on NTFS with a file system
Mar 7, 2004 9:24PM PST
- Collapse -
Re:Re:Permissions on NTFS with a file system
Mar 8, 2004 8:36PM PST

Sorry - what I mean by hard-set is that it is not inherited from the parent folder.

I tried some tests:

1. Folder 'A' contains folder '1' and folder '2'
2. Folder '2' has a special permission for some user.

If I change the permissions on Folder 'A' by taking the tick from "Allow inheritable permissions from parent to propogate this object" and press copy when asked, it also takes away the special permission for the user on folder 2, thereby removing this special permission for a user.


What I do is work in a school. I use citrix and want to take permissions away from users browsing directories but need the drive letters to be mapped. All the directories I have are set with lots of permissions so I dont want to change them. So if i can take away list contents advanced option then I have resolved my issue. This all comes from not being able to disable view, explorer bar, folders from internet explorer, which gives them access to drive letters etc...

Thank you.

- Collapse -
CACLS is not GUI, therefore no tick.
Mar 8, 2004 8:42PM PST

Another benefit is that you can put it all in a batch or script file to re-run when need be to set things as you wish.

Bob

- Collapse -
XCACLS
Mar 9, 2004 7:45PM PST

I have discovered XcAcls. You know it can set special permissions, well i want to make it set a permission on a folder. The permission i want to remove is list contents/read data.

I cannot work out which permission to use on the command line. I only need to change this one permission. I want to use:

xcacls folder /e /p everyone:???

the ?? is the bit i need.

Thanks

- Collapse -
Re:XCACLS
Mar 9, 2004 8:30PM PST

To limit a person to read a directory in some place, you change it's ownership.

What you get to learn is that permissions is a sly combination of not only what you set with CACLS or XCALCS, but ownership as well.

Think about it.

Bob

- Collapse -
XACLS documentation.
Mar 9, 2004 9:16PM PST
http://www.jsiinc.com/SUBK/tip5100/rh5171.htm writes about it in detail.

But it's best that you know something about my answers. I rarely give a direct answer. It's my choice to supply either a document (like above), a GOOGLE example or a comment that can lead a person to discover on their own what the answer is.

Think of it as fishing lessons, but no fish.

Bob
- Collapse -
Re:XACLS documentation.
Mar 10, 2004 7:09PM PST

That is good enough for me!

Thanks once again. Do you want a job here!!