|
View Full Version : files and folder
Arsen 01-14-2004, 04:59 PM this is my network share \\users\*.*
I have about 200 user folders in \\users\
I want to be able to allow everyone to get into \\users but disable the
inheritance to the all the child folders within \\users
is there a fast way of doing this, instead of visiting every single folder
within \\users.
Jeremy Winston 01-14-2004, 05:44 PM Arsen wrote:
> this is my network share \\users\*.*
> I have about 200 user folders in \\users\
> I want to be able to allow everyone to get into \\users but disable the
> inheritance to the all the child folders within \\users
> is there a fast way of doing this, instead of visiting every single folder
> within \\users.
How are the perms on each user folder set right now?
If you end up needing to visit each user's folder, use a command script.
E.g.,
REM ----- Begin script -----
cd \\users
for /d %%u in (*) do call :chgperms %%u
goto :eof
:chgperms
cacls %1 /T /E /C /G DOMAIN\%1:F
REM ----- End script -----
where "DOMAIN" is your domain, &
%%u is substitued with the name of the users' directories, one
at a time, and I assume the user's userid and directory name
are identical.
If you want to verify that this will do what you want without changing anything,
change the cacls line to
@echo cacls %1 /T /E /C /G DOMAIN\%1:F
HTH,
-Jeremy
Jeremy Winston 01-14-2004, 05:44 PM Arsen wrote:
> this is my network share \\users\*.*
> I have about 200 user folders in \\users\
> I want to be able to allow everyone to get into \\users but disable the
> inheritance to the all the child folders within \\users
> is there a fast way of doing this, instead of visiting every single folder
> within \\users.
How are the perms on each user folder set right now?
If you end up needing to visit each user's folder, use a command script.
E.g.,
REM ----- Begin script -----
cd \\users
for /d %%u in (*) do call :chgperms %%u
goto :eof
:chgperms
cacls %1 /T /E /C /G DOMAIN\%1:F
REM ----- End script -----
where "DOMAIN" is your domain, &
%%u is substitued with the name of the users' directories, one
at a time, and I assume the user's userid and directory name
are identical.
If you want to verify that this will do what you want without changing anything,
change the cacls line to
@echo cacls %1 /T /E /C /G DOMAIN\%1:F
HTH,
-Jeremy
Arsen 01-14-2004, 05:59 PM Thanks a lot
"Arsen" <anonymous@discussions.microsoft.com> wrote in message
news:O9Vu48r2DHA.1336@TK2MSFTNGP12.phx.gbl...
> this is my network share \\users\*.*
> I have about 200 user folders in \\users\
> I want to be able to allow everyone to get into \\users but disable the
> inheritance to the all the child folders within \\users
> is there a fast way of doing this, instead of visiting every single folder
> within \\users.
>
>
Arsen 01-14-2004, 05:59 PM Thanks a lot
"Arsen" <anonymous@discussions.microsoft.com> wrote in message
news:O9Vu48r2DHA.1336@TK2MSFTNGP12.phx.gbl...
> this is my network share \\users\*.*
> I have about 200 user folders in \\users\
> I want to be able to allow everyone to get into \\users but disable the
> inheritance to the all the child folders within \\users
> is there a fast way of doing this, instead of visiting every single folder
> within \\users.
>
>
Joe Griffin [MSFT] 01-15-2004, 09:49 PM You need to check on policies and "bypass traverse checking". Unless I
misunderstand what you are trying to do, you are doing this the hard way.
Please review the following KB Articles, maybe they will assist.
http://support.microsoft.com/default.aspx?scid=KB;EN-US;308419
http://support.microsoft.com/default.aspx?scid=KB;EN-US;277644
If you need further assistance, I suggest you post the question in active
directory. This is an Active Directory Policy issue.
Joe Griffin [MS]
Windows 2000 Server Setup Team
--
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
From: "Arsen" <anonymous@discussions.microsoft.com>
References: <O9Vu48r2DHA.1336@TK2MSFTNGP12.phx.gbl>
Subject: Re: files and folder
Date: Wed, 14 Jan 2004 12:59:10 -0500
Lines: 13
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Message-ID: <eZA#Fes2DHA.2156@TK2MSFTNGP12.phx.gbl>
Newsgroups: microsoft.public.win2000.file_system
NNTP-Posting-Host: ppp-64-115-117-6.broadviewnet.net 64.115.117.6
Path:
cpmsftngxa07.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.
phx.gbl
Xref: cpmsftngxa07.phx.gbl microsoft.public.win2000.file_system:16419
X-Tomcat-NG: microsoft.public.win2000.file_system
Thanks a lot
"Arsen" <anonymous@discussions.microsoft.com> wrote in message
news:O9Vu48r2DHA.1336@TK2MSFTNGP12.phx.gbl...
> this is my network share \\users\*.*
> I have about 200 user folders in \\users\
> I want to be able to allow everyone to get into \\users but disable the
> inheritance to the all the child folders within \\users
> is there a fast way of doing this, instead of visiting every single folder
> within \\users.
>
>
Joe Griffin [MSFT] 01-15-2004, 09:49 PM You need to check on policies and "bypass traverse checking". Unless I
misunderstand what you are trying to do, you are doing this the hard way.
Please review the following KB Articles, maybe they will assist.
http://support.microsoft.com/default.aspx?scid=KB;EN-US;308419
http://support.microsoft.com/default.aspx?scid=KB;EN-US;277644
If you need further assistance, I suggest you post the question in active
directory. This is an Active Directory Policy issue.
Joe Griffin [MS]
Windows 2000 Server Setup Team
--
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
From: "Arsen" <anonymous@discussions.microsoft.com>
References: <O9Vu48r2DHA.1336@TK2MSFTNGP12.phx.gbl>
Subject: Re: files and folder
Date: Wed, 14 Jan 2004 12:59:10 -0500
Lines: 13
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Message-ID: <eZA#Fes2DHA.2156@TK2MSFTNGP12.phx.gbl>
Newsgroups: microsoft.public.win2000.file_system
NNTP-Posting-Host: ppp-64-115-117-6.broadviewnet.net 64.115.117.6
Path:
cpmsftngxa07.phx.gbl!cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.
phx.gbl
Xref: cpmsftngxa07.phx.gbl microsoft.public.win2000.file_system:16419
X-Tomcat-NG: microsoft.public.win2000.file_system
Thanks a lot
"Arsen" <anonymous@discussions.microsoft.com> wrote in message
news:O9Vu48r2DHA.1336@TK2MSFTNGP12.phx.gbl...
> this is my network share \\users\*.*
> I have about 200 user folders in \\users\
> I want to be able to allow everyone to get into \\users but disable the
> inheritance to the all the child folders within \\users
> is there a fast way of doing this, instead of visiting every single folder
> within \\users.
>
>
|
|
|