xcacls.vbs which was mentioned and may be found at the
www.microsoft.com/downloads page can set any DACL
for NTFS objects.
However, since you will have a highly specific and varied
ACLing (from what you have said) it will be _extremely_
difficult to maintain if you just set things directly.
For that reason I recommend that you use the Security
Templates MMC snap-in and using the filesystem section
define a template to effect the ACLing you are after.
After the template is applied to the structure you will then
be able (at any future time) to analyze the structure with the
template to see what is not aligned to your specification and
optionally reapply to make it as specified. These later steps
are done with the Security Config and Analysis MMC snap-in.
When you define the template and save it you get a text file
which you can edit (notepad etc) so you only really need to
define the basic ACL patterns you are after and then can just
copy/paste and alter the target folder/file of the pasted.
Roger
"Colin Chaplin" <colin[ at ]chaplin.me.uk> wrote in message
news:f3jnl1$dis$1$8300dec7[ at ]news.demon.co.uk...
[Quoted Text] >
> What I want to do is apply a bunch of permissions to files (millions of
> files) and whilst most of the files will have permissions such as 'read
> only' some may be more exotic
>
>
> Therefore, I want to apply mask type and flags for a username directly to
> a file using their numberical values.
>
> I've googled a bit but can't see an app that does this... seems an obvious
> thing to do?
>
>
> for example my magical app would allow
>
>
> magicapp c:\test.txt domain\username 20321217 0 16
>
> to set the access mask 20321217 type 0 and flag 16 for the user
> domain\username to the file test.txt
>
> Anyone got any ideas?
>
> Thanks
>
> Colin
>
|