View Full Version : Set or unset inheritance


F Laufs
09-07-2006, 01:46 PM
Hi,

I've got a folder which has over 100 subfolders, all of which are currently
inheriting their permissions. Is there any way to switch off that inheritance
apart from going into the properties of each one and doing it manually.

Thanks for your help!

Roger Abell [MVP]
09-07-2006, 04:15 PM
Since removing inheritance does not itself mean granting (copying)
the existing inherited permissions (making the copy explicit on that
folder/file) - something done in the UI as a separate action, you
really need a way to block inheritance and also set the new grants
on each of those 100 folders.

You probably should look into taking a dir list that names the
full path of the folders to have this change, and then pipe that
into a repeated execution of xcacls.vbs which IIRC can control
the inheritance at the same time as setting the new grants (do
not use the /e option so that the execution replaces the ACL
instead of editing/modifying it).

"F Laufs" <FLaufs@discussions.microsoft.com> wrote in message
news:CAD5C250-C9B2-4A1A-8525-F09466ECC1CE@microsoft.com...
> Hi,
>
> I've got a folder which has over 100 subfolders, all of which are
> currently
> inheriting their permissions. Is there any way to switch off that
> inheritance
> apart from going into the properties of each one and doing it manually.
>
> Thanks for your help!

F Laufs
09-07-2006, 04:31 PM
Thanks for the input Roger. This has answered my question.






"Roger Abell [MVP]" wrote:

> Since removing inheritance does not itself mean granting (copying)
> the existing inherited permissions (making the copy explicit on that
> folder/file) - something done in the UI as a separate action, you
> really need a way to block inheritance and also set the new grants
> on each of those 100 folders.
>
> You probably should look into taking a dir list that names the
> full path of the folders to have this change, and then pipe that
> into a repeated execution of xcacls.vbs which IIRC can control
> the inheritance at the same time as setting the new grants (do
> not use the /e option so that the execution replaces the ACL
> instead of editing/modifying it).
>
> "F Laufs" <FLaufs@discussions.microsoft.com> wrote in message
> news:CAD5C250-C9B2-4A1A-8525-F09466ECC1CE@microsoft.com...
> > Hi,
> >
> > I've got a folder which has over 100 subfolders, all of which are
> > currently
> > inheriting their permissions. Is there any way to switch off that
> > inheritance
> > apart from going into the properties of each one and doing it manually.
> >
> > Thanks for your help!
>
>
>