All,

I am looking for an example xcacls AD command
to set read permission on a folder for a user
or group, but prohibit the subfolders from
inheriting the permissions. (this is equivalent
to the "advanced -> edit - [this folder only] dropdown")

I have numerous subfolders and only want to grant
access to one or two, but ALL users will need
read access to the parent.

Second, what flags would I use to
prohibit all access to the C:\ drive for
the group or user.

I am managing a secure ftp ID and I really need
to clamp down hard on access rights when using
cygwin on my server.

Thanks in advance-

Bill

On Tue, 25 Oct 2005 12:11:29 GMT, "William Hymen" <t18_pilot@hotmail.com> wrote:

>All,
>
>I am looking for an example xcacls AD command
>to set read permission on a folder for a user
>or group, but prohibit the subfolders from
>inheriting the permissions. (this is equivalent
>to the "advanced -> edit - [this folder only] dropdown")
>
>I have numerous subfolders and only want to grant
>access to one or two, but ALL users will need
>read access to the parent.
>
>Second, what flags would I use to
>prohibit all access to the C:\ drive for
>the group or user.
>
>I am managing a secure ftp ID and I really need
>to clamp down hard on access rights when using
>cygwin on my server.
>
>Thanks in advance-
>
>Bill
>
>
See tip 8225 » The Extended Change Access Control List tool (Xcacls.vbs) has been enhanced and replaces Xcacls.exe.
in the 'Tips & Tricks' at http://www.jsifaq.com

Use /SPEC A for "This Folder Only"

To prohibit access to the C: drive on your FTP server, Deny users Read permission, and remove Admins from the users group.

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com