Tool to set rights on sub folders/files

[bluewhaleCA]

I've had no luck finding a tool for W2K Server which allows one to look at a folder and the entire sub-folder/file structure and set different levels of access for specific groups at one time...
ie: In the job folder users can not create or delete anything, just view and pass through it. In a sub-folder users can not create or delete... however regarding the files inside those sub-folders users Can create and delete based upon group membership.... and in those same lower level folders users can not create or delete folders....
I can do this piecemeal, but when something goes wrong I find I have to give all users full rights and start over
( happens a couple of times a year ).
Does anyone use a tool which eases and automates file rights many levels down?
Thanks!

Paul

 

[GlenJohnson]

Have you shared the main folder, and leave the option to allow inheritable rights checked? Then below that in the sub-folders, you uncheck that box, and choose remove. Then just add the users or groups you want access to them. Just a thought. Glen A. Johnson
Microsoft Certified Professional
glen@nellsgiftbox.com


"The past, though it cannot be relived, can always be repaired."
John La Farge (1835-1910); U.S. artist.

 

[bluewhaleCA]

The problem is that it goes for more than one sub-folder level... say you have a directory tree with 5 levels of folders, and differing requirements on each one. Then you have to make the changes to 1000 folders in the highest level of sub-folders, about 60 gigs of data. ( not much I know, but it takes a while )
The problem lies in setting the rights or denials so that they DO propogate downward, giving each level it's own specific rules.. it would take FAR too long to go to each of the 1000 jobs then work on the 7-10 sub-folders in each job, then the folders beneath those... I used to know Netware ( 12 years ago <g> ) and believe it could do this, but haven't found a way to do it with Microsofts servers.

Ah well: thanks for the thought.

Paul

 

[GlenJohnson]

OUCH!!!!!!! Good luck. Let me know how it goes.

Glen A. Johnson
Microsoft Certified Professional
glen@nellsgiftbox.com


&quot;The past, though it cannot be relived, can always be repaired.&quot;
John La Farge (1835-1910); U.S. artist.

 

[dpsmith]

check out:

http://www.smallwonders.com/

download the Security Explorer on the right.

i just downloaded it yesterday.
it looks pretty good.

 

[bluewhaleCA]

I'll check it out.
Thanks!

 

[CoolClark]

Check out xcacls on the resource kit.

 

[natecasp]

Yeah, you should use the command line utility xcacls that will set the permissions for multiple users, files and directories. Also you can write a batch file or script that utilizes it and run in when you need to.

 

[bluewhaleCA]

Thanks guys, but a command line utility doesn't sound right. 3 or 4 levels down different jobs have differing numbers of folders.. and sub folders as well... I need something with which I can set options two or three levels down AND below that so that all sub folders can not be deleted, but I can't set that at the top two folder levels.
Somehow I can't see a command line program allowing that sort of flexibility.
Thanks for the thought tho.

Paul

 

[polymath5]

Follow dpsmith's advice. Security Explorer is the ticket. It's well worth the $$. Easy to use and very fast. I think they have a demo version that you can try. I've recommended it to a lot of fellow admins, all swear by it.