Clicky

Windows Server 2003 R2, x64 Edition, SP2

We have a main share folder on our network. It has parent folders for each department. Each of those folders has numerous subfolders, each with specific permissions assigned to security groups. I need to add a security group which has read only access to every parent and child folder in the main share folder. How do I do this without breaking existing permissions and without applying the permission to one folder at a time? This would take days.

asked 12/11/2011 05:30

garion1's gravatar image

garion1 ♦♦


7 Answers:
Add that security group in the sharing permission with read only access in the root shared folder. That will inherit to the childs
link

answered

Shbasha's gravatar image

Shbasha

There are currently no existing groups with read only access throughout the share folders so this won't help. The big problem is applying a new permission to child folders will change all existing permissions.
link

answered 2011-12-12 at 04:10:43

garion1's gravatar image

garion1

We don't have inherit from parent set on our folders as permissions are very specific.
link

answered 2011-12-12 at 06:13:47

garion1's gravatar image

garion1

I meant to add new security group in the sharing permission.
link

answered 2011-12-12 at 06:14:35

Shbasha's gravatar image

Shbasha

On the server in a command prompt enter the following command

cacls D:\data /T /E /C /G domain\group:R

where D:\data is the "main share folder" and the domain\group is the group you want to give read rights

/T Changes ACLs of specified files in the current directory and all subdirectories.
/E Edit ACL instead of replacing it.
/C Continue on access denied errors
/G user:perm Grant specified user access rights.
link

answered 2011-12-12 at 20:15:13

deroode's gravatar image

deroode

Thanks deroode. I will try this on a test folder. Will let you know.
link

answered 2011-12-13 at 00:44:29

garion1's gravatar image

garion1

Worked perfectly! I'm not much of a command line person but this is incredibly valuable advice. I also read up on the cacls command to better understand it.
Thank you deroode.
link

answered 2011-12-13 at 08:27:21

garion1's gravatar image

garion1

Your answer
[hide preview]

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Tags:

×1
×1
×14
×30
×2
×2
×82

Asked: 12/11/2011 05:30

Seen: 348 times

Last updated: 12/13/2011 04:27