General discussion


Assigning share permissions in domains

By pnramesh ·

I am in the process of creating a batch file which can set permissions for the shares,present in several computers(all Windows 2000), from one computer. I am using the SUBINACL utility. It worked just fine within a domain. Are there any restrictions in running this script across domains? When i ran this in a multiple domain enviroment from a client computer it worked fine and set permissions for several users from the other domains. When the same is executed from one of the domain controllers it didnt worked. Help me please....

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by BFilmFan In reply to Assigning share permissio ...

Are these DFS shares?

Or shares on the DC, such as SYSVOL?

You can't change the rights easily on those types of shares as Windows 2000 and later has specialized security on SYSVOL that is re-applied to prevent you removing certain required righs.

And the utility you are using actually changes the NTFS and not the share permissions. If you sign in with an Enterprise Administrator account, you should easily be able to change the righs in other domains. You will have to recall that the domain adminstrators group only exists as an object in a single domain and that info isn't passed to another domain. Thus, if your domain X account needs rights in Y domain Admins, you will have to place that account in that group.

Related Discussions

Related Forums