Discussion on:
View:
Show:
I used CACLS with the /G switch to add a user to an ACL. Neither your article or my book "Windows 2000 Administration in a nutshell" mention that if you use /G switch, it will overwrite rather than edit the ACL. Be Careful! I had no idea it would wipe out every user and group in the ACL. Luckily I had taken a screen shot of the ACL prior to running CACLS.
As you found out Cacl's is a very powerful tool. I always check twice before I run my calc commands. The /e parameter is the one that allows you to edit the ACL instead of replacing it. Imagine running a cacl /g /t on the root directory without adding the /e parameter. Happy computing.
I once managed to change the permissions on a folder (using cacle but leaving out /E) so that *no one* (not even Administrator) had the right to read or *change permissions* on the folder! Thank God for system restore.
If you are completely locked out, the Administrator can always take ownership and change permissions. System restore is a solution for more critical situations.
I know this is an old old post, but I had to share this.
Came upon an xp home machine, that nothing else worked, fixing it.
I ran the subinacl (in regular mode), rebooted, and everything was perfect.
I know it is said it doesn't work on XP but I figured what did I have to lose? It saved gutted it out and reinstalling everything, including the OS. It took about 30 min.tops.
Came upon an xp home machine, that nothing else worked, fixing it.
I ran the subinacl (in regular mode), rebooted, and everything was perfect.
I know it is said it doesn't work on XP but I figured what did I have to lose? It saved gutted it out and reinstalling everything, including the OS. It took about 30 min.tops.
What if I want to save or backup the existing permissions on a particular hierarchy of folders to be restored later as needed? (not backup of the actual data... just the security on the folders)
Could this be done with cacls or xcacls?? How??
Could this be done with cacls or xcacls?? How??
If you have a long tree, like I did once, you can use cacls that prints all the ACL's to the screen. Just redirect it to a file. Then you can cut and paste, if necessary, to rebuild your permissions. This saved me BIG time once before.
Try Security Explorer - by Small Wonders Software - www.smallwonders.com - It can backup and restore permissions and makes all this permissions stuff easier than CACLS!
Ben
Ben
I use cacls in scripts all the time. I bought the book "windows nt shell scripting" and it has an advanced script in it using cacls.
The book is worth it's weight in gold, but may be obsolete, I haven't bothered using other scripting techniques (vbscript, jscript, etc.)
lee randolph, ccnp, etc...
The book is worth it's weight in gold, but may be obsolete, I haven't bothered using other scripting techniques (vbscript, jscript, etc.)
lee randolph, ccnp, etc...
I prefer subinacle to cacls.
We have a SFU 3 NFS server.
Subinacl lets me set the owner and primary posix group as well as change the acls.
I think I got it from the 2000 resource kit.
We have a SFU 3 NFS server.
Subinacl lets me set the owner and primary posix group as well as change the acls.
I think I got it from the 2000 resource kit.
- Keyboard Shortcuts:
- Prev
- Next
- Toggle
