Click here to get back home

Adding multiple entries for the same user with xcacls...

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Adding multiple entries for the same user with xcacls... condiment 07-19-2007
Posted by condiment on July 19, 2007, 2:21 pm
Please log in for more thread options
Hello,
Is there a way to add multiple entires for the same user using
xcacls? I am open to other suggestions, but here is what I need to
do...

I need to give Domain Admins specific access to "Subfolders and
Files".

I also need to give Domain Admins specific access to "This Folder
only"

When I use xcacls, the last command just overwrites the first... I
realize that /G replaces the existing settings, however I do not see
any options to accomplish what I need. If there is another tool to
accomplish this, I am open to other possibilities.

cscript xcacls.vbs test /I COPY /SPEC A /G "Domain Admins":618423B

cscript xcacls.vbs test /I COPY /SPEC E /G "Domain Admins":6184237AB

Thank you in advance


Posted by Roger Abell [MVP] on July 19, 2007, 11:10 pm
Please log in for more thread options
You appear to be overlooking the /e switch, which mean Edit the
existing grants for the principal rather than replacing them

> Hello,
> Is there a way to add multiple entires for the same user using
> xcacls? I am open to other suggestions, but here is what I need to
> do...
>
> I need to give Domain Admins specific access to "Subfolders and
> Files".
>
> I also need to give Domain Admins specific access to "This Folder
> only"
>
> When I use xcacls, the last command just overwrites the first... I
> realize that /G replaces the existing settings, however I do not see
> any options to accomplish what I need. If there is another tool to
> accomplish this, I am open to other possibilities.
>
> cscript xcacls.vbs test /I COPY /SPEC A /G "Domain Admins":618423B
>
> cscript xcacls.vbs test /I COPY /SPEC E /G "Domain Admins":6184237AB
>
> Thank you in advance
>



Posted by Condiment on July 20, 2007, 12:24 am
Please log in for more thread options
Roger,
Thank you a million times. I briefly attempted the /E switch, but when
I received a syntax error, I just assumed I was heading down the wrong path.
What I failed to realize is that /E can be used with /G. You rock.

Thank you again.

> You appear to be overlooking the /e switch, which mean Edit the
> existing grants for the principal rather than replacing them
>
>> Hello,
>> Is there a way to add multiple entires for the same user using
>> xcacls? I am open to other suggestions, but here is what I need to
>> do...
>>
>> I need to give Domain Admins specific access to "Subfolders and
>> Files".
>>
>> I also need to give Domain Admins specific access to "This Folder
>> only"
>>
>> When I use xcacls, the last command just overwrites the first... I
>> realize that /G replaces the existing settings, however I do not see
>> any options to accomplish what I need. If there is another tool to
>> accomplish this, I am open to other possibilities.
>>
>> cscript xcacls.vbs test /I COPY /SPEC A /G "Domain Admins":618423B
>>
>> cscript xcacls.vbs test /I COPY /SPEC E /G "Domain Admins":6184237AB
>>
>> Thank you in advance
>>
>
>



Posted by Roger Abell [MVP] on July 20, 2007, 2:04 am
Please log in for more thread options
> Roger,
> Thank you a million times. I briefly attempted the /E switch, but when
> I received a syntax error, I just assumed I was heading down the wrong
> path.

been there , guessing of syntax

> What I failed to realize is that /E can be used with /G. You rock.

:)

>
> Thank you again.

To you too - :)

--
ra
>
>> You appear to be overlooking the /e switch, which mean Edit the
>> existing grants for the principal rather than replacing them
>>
>>> Hello,
>>> Is there a way to add multiple entires for the same user using
>>> xcacls? I am open to other suggestions, but here is what I need to
>>> do...
>>>
>>> I need to give Domain Admins specific access to "Subfolders and
>>> Files".
>>>
>>> I also need to give Domain Admins specific access to "This Folder
>>> only"
>>>
>>> When I use xcacls, the last command just overwrites the first... I
>>> realize that /G replaces the existing settings, however I do not see
>>> any options to accomplish what I need. If there is another tool to
>>> accomplish this, I am open to other possibilities.
>>>
>>> cscript xcacls.vbs test /I COPY /SPEC A /G "Domain Admins":618423B
>>>
>>> cscript xcacls.vbs test /I COPY /SPEC E /G "Domain Admins":6184237AB
>>>
>>> Thank you in advance
>>>
>>
>>
>
>



Posted by Condiment on July 23, 2007, 11:59 am
Please log in for more thread options
I think I am still missing something.

Even running /E it still updates the existing entry instead of creating a
new one (different /SPEC syntax for each) for the group that I am granting
permissions to. Any ideas what I am misisng here?

>> Roger,
>> Thank you a million times. I briefly attempted the /E switch, but
>> when I received a syntax error, I just assumed I was heading down the
>> wrong path.
>
> been there , guessing of syntax
>
>> What I failed to realize is that /E can be used with /G. You rock.
>
> :)
>
>>
>> Thank you again.
>
> To you too - :)
>
> --
> ra
>>
>>> You appear to be overlooking the /e switch, which mean Edit the
>>> existing grants for the principal rather than replacing them
>>>
>>>> Hello,
>>>> Is there a way to add multiple entires for the same user using
>>>> xcacls? I am open to other suggestions, but here is what I need to
>>>> do...
>>>>
>>>> I need to give Domain Admins specific access to "Subfolders and
>>>> Files".
>>>>
>>>> I also need to give Domain Admins specific access to "This Folder
>>>> only"
>>>>
>>>> When I use xcacls, the last command just overwrites the first... I
>>>> realize that /G replaces the existing settings, however I do not see
>>>> any options to accomplish what I need. If there is another tool to
>>>> accomplish this, I am open to other possibilities.
>>>>
>>>> cscript xcacls.vbs test /I COPY /SPEC A /G "Domain Admins":618423B
>>>>
>>>> cscript xcacls.vbs test /I COPY /SPEC E /G "Domain Admins":6184237AB
>>>>
>>>> Thank you in advance
>>>>
>>>
>>>
>>
>>
>
>


Similar ThreadsPosted
Multiple user certificate thumbprint April 19, 2006, 10:04 pm
Folder Encryption Multiple User Access October 16, 2007, 10:35 am
Firewall setting for multiple FTP sites using multiple ports September 12, 2006, 12:35 pm
Adding a User from One Domain to a Group in Another Domain August 18, 2006, 12:12 am
Security log entries May 5, 2006, 12:16 pm
Firewall Log Entries Help May 31, 2006, 4:15 pm
Win2003 Server - 10,000 Entries ! February 9, 2006, 11:28 pm
How to automatically inherit permission entries on child objects? January 21, 2006, 7:43 am
Adding new template on Win 2000 DC June 3, 2005, 11:30 am
Adding Computer account to folder security March 20, 2006, 9:19 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap