Adding user permissions to multiple subfolders

Hello,

This is a problem that I frequently run into and hope I can get some
advice on.

There are some shared folders, that have sub folders with non
inheriting permissions (different set).

I'll try to illustrate this with the following example:

Folder name Data has read only access for User A, B, C and so on
Subfolder DivisionA under this folder has full access for A (and no
other access)
Subfolder DivisionB has full access for user B (and no other access)
And so on...

Now I have user C who A, B, C ,etc report to asking for permissions to
subfolders DivisionA, DivisionB

Is there a way to add the access ACLs for user C to all subfolders
without manually going into the permissions for each folder?

Also, if someone can recommend a tool to report all ACLs in a folder
structure that would be appreciated as well.

Thanks in advance

lforbes
Sun Mar 30 13:44:01 PDT 2008

Hi,

Is this Windows 2003 or Windows 2000? I used xcacls.exe which is a utility
included with Microsoft. It views permissions and lets you set permissions
via batch file.

However, it makes more sense with Windows 2003 to enable inheritance on
subfolders and then on the main folder set the permission 'Users A, B, C' =
Read (This Folder Only).

With the "This Folder Only" permission it does not inherit to subfolders.

I have 2500 users in my Users Directory.

On the Upper Users Directory Folder I have the following permissions:

Administrators = Full Control, (This Folder, subfolders and files)
System = Full Control, (This Folder, subfolders and files)
Users = Read (This folder only)
SpecialUsers = Read (This Folder, subfolders and files) (for users who need
access to others accounts for different reasons.

What this does is give the users the ability to see all the folders but not
enter them unless they have full control on them.

Then with inheritance added all you have to do is add a users group to the
upper folder and they automatically have the permissions.

Cheers,
Lara

"DukeN" wrote:

> Hello,
>
> This is a problem that I frequently run into and hope I can get some
> advice on.
>
> There are some shared folders, that have sub folders with non
> inheriting permissions (different set).
>
> I'll try to illustrate this with the following example:
>
> Folder name Data has read only access for User A, B, C and so on
> Subfolder DivisionA under this folder has full access for A (and no
> other access)
> Subfolder DivisionB has full access for user B (and no other access)
> And so on...
>
> Now I have user C who A, B, C ,etc report to asking for permissions to
> subfolders DivisionA, DivisionB
>
> Is there a way to add the access ACLs for user C to all subfolders
> without manually going into the permissions for each folder?
>
> Also, if someone can recommend a tool to report all ACLs in a folder
> structure that would be appreciated as well.
>
> Thanks in advance
>

DukeN
Thu Apr 03 14:02:56 PDT 2008

Thanks for answering - this is server 2003. I'll look into that CL
util and see if that'll do the trick for me.

Unfortunately at this point I cant change the inheritance on the
folders for that would reset years of specific permissions on a lot of
subfolders.

Thanks again.

UnfortunatelyOn Mar 30, 4:44 pm, lforbes
<lfor...@discussions.microsoft.com> wrote:
> Hi,
>
> Is this Windows 2003 or Windows 2000? I used xcacls.exe which is a utility
> included with Microsoft. It views permissions and lets you set permissions
> via batch file.
>
> However, it makes more sense with Windows 2003 to enable inheritance on
> subfolders and then on the main folder set the permission 'Users A, B, C' =
> Read (This Folder Only).
>
> With the "This Folder Only" permission it does not inherit to subfolders.
>
> I have 2500 users in my Users Directory.
>
> On the Upper Users Directory Folder I have the following permissions:
>
> Administrators = Full Control, (This Folder, subfolders and files)
> System = Full Control, (This Folder, subfolders and files)
> Users = Read (This folder only)
> SpecialUsers = Read (This Folder, subfolders and files) (for users who need
> access to others accounts for different reasons.
>
> What this does is give the users the ability to see all the folders but not
> enter them unless they have full control on them.
>
> Then with inheritance added all you have to do is add a users group to the
> upper folder and they automatically have the permissions.
>
> Cheers,
> Lara
>
> "DukeN" wrote:
> > Hello,
>
> > This is a problem that I frequently run into and hope I can get some
> > advice on.
>
> > There are some shared folders, that have sub folders with non
> > inheriting permissions (different set).
>
> > I'll try to illustrate this with the following example:
>
> > Folder name Data has read only access for User A, B, C and so on
> > Subfolder DivisionA under this folder has full access for A (and no
> > other access)
> > Subfolder DivisionB has full access for user B (and no other access)
> > And so on...
>
> > Now I have user C who A, B, C ,etc report to asking for permissions to
> > subfolders DivisionA, DivisionB
>
> > Is there a way to add the access ACLs for user C to all subfolders
> > without manually going into the permissions for each folder?
>
> > Also, if someone can recommend a tool to report all ACLs in a folder
> > structure that would be appreciated as well.
>
> > Thanks in advance