Comments for Tim Bolton - MCITP - MCTS

Comment on icacls – changing permissions on files and folders. by Tim Bolton

Tim Bolton — Wed, 11 Apr 2012 11:10:12 +0000

As I mentioned earlier I no longer have access to this environment to be able to test. I would however look at these links and use the Get-ACL cmdlet which may help simplify your task. If I get to a test box where I can test I will post.

Using the Get-Acl Cmdlet
http://technet.microsoft.com/en-us/library/ee176838.aspx

Hey, Scripting Guy! How Can I Use Windows PowerShell to Determine the Owner of a File?
16 Apr 2008 1:08 AM

http://blogs.technet.com/b/heyscriptingguy/archive/2008/04/15/how-can-i-use-windows-powershell-to-determine-the-owner-of-a-file.aspx

Hey, Scripting Guy! Can I Apply Security Settings for One Folder to Many Other Folders?
16 Sep 2009 3:01 AM

http://blogs.technet.com/b/heyscriptingguy/archive/2009/09/16/hey-scripting-guy-september-16-2009.aspx

Hey, Scripting Guy! Can I Remove Specific Folder Access Rights on a Per-User Basis?
17 Sep 2009 3:01 AM

http://blogs.technet.com/b/heyscriptingguy/archive/2009/09/17/hey-scripting-guy-september-17-2009.aspx

Archiving File Shares with Windows PowerShell
13 Dec 2010 12:01 AM

http://blogs.technet.com/b/heyscriptingguy/archive/2010/12/13/archiving-file-shares-with-windows-powershell.aspx

Restore NTFS Security Permissions by Using PowerShell
18 Sep 2011 12:01 AM

http://blogs.technet.com/b/heyscriptingguy/archive/2011/09/18/restore-ntfs-security-permissions-by-using-powershell.aspx

Comment on icacls – changing permissions on files and folders. by asus77x

asus77x — Wed, 11 Apr 2012 10:15:17 +0000

using this command and found permission is set for folder user01

icacls \\myserver\userdata\user01 /inheritance:r /grant mydomain\user01:(OI)(CI)F

but when create subfolder or files under folder user01, it give access denied. root folder userdata is configured with read permission only for group where user01 as member, when set with write access, other users can view folder user01 contents

any idea why this happen?

Comment on icacls – changing permissions on files and folders. by Tim Bolton (@jsclmedave)

Tim Bolton (@jsclmedave) — Sat, 31 Mar 2012 14:24:29 +0000

Please see this GREAT post using Powershell ACL – http://blogs.technet.com/b/josebda/archive/2010/11/12/how-to-handle-ntfs-folder-permissions-security-descriptors-and-acls-in-powershell.aspx

Comment on icacls – changing permissions on files and folders. by Tim Bolton

Tim Bolton — Thu, 08 Mar 2012 20:49:16 +0000

It was just confirmed that YES this still applies.

Please refer to Greg Shields post here for further information which still applies –

http://technet.microsoft.com/en-us/magazine/2009.07.geekofalltrades.aspx

Comment on icacls – changing permissions on files and folders. by Tim Bolton

Tim Bolton — Thu, 08 Mar 2012 20:48:32 +0000

It was just confirmed that YES this still applies…

Please refer to Greg Shields post here for further information which still applies -

http://technet.microsoft.com/en-us/magazine/2009.07.geekofalltrades.aspx

Comment on icacls – changing permissions on files and folders. by Tim Bolton

Tim Bolton — Thu, 08 Mar 2012 20:28:48 +0000

My apologies, as I stated I am not with that company anymore so I will try to test this in a lab when at all possible. I have found a lot of posts on this issue in the last year. I am not sure if something was deprecated or changed causing this to not work as directed.

You did break the inheritance (/inheritance:r) and then reset the new directly-applied permissions (/grant) correct?

Again, since I am no longer with that company I really cannot go back to see if it will work or not as the role I currently have does not allow me access to set these settings on any of our servers.

Comment on icacls – changing permissions on files and folders. by TWG

TWG — Thu, 08 Mar 2012 20:19:08 +0000

@JRV – I’m having the same problem trying to get /grant:r to remove existing permissions on Server 2008 non-R2.

Comment on icacls – changing permissions on files and folders. by Tim Bolton

Tim Bolton — Mon, 05 Mar 2012 02:02:31 +0000

I am not with that company anymore so I will try to test this in a lab when possible.

Comment on icacls – changing permissions on files and folders. by JRV

JRV — Sat, 03 Mar 2012 20:13:15 +0000

And, here, I’m seeing that /Grant:R does not remove existing ACEs. WS2008 R2 SP1 & Win7 SP1.

Comment on The current time on this computer… by Ren

Ren — Tue, 07 Feb 2012 08:30:28 +0000

Great solution thanks very much.