Click here to get back home

Utility to directly write NTFS masks etc

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Utility to directly write NTFS masks etc Colin Chaplin 05-30-2007
Posted by Colin Chaplin on May 30, 2007, 7:37 am
Please log in for more thread options

What I want to do is apply a bunch of permissions to files (millions of
files) and whilst most of the files will have permissions such as 'read
only' some may be more exotic


Therefore, I want to apply mask type and flags for a username directly to a
file using their numberical values.

I've googled a bit but can't see an app that does this... seems an obvious
thing to do?


for example my magical app would allow


magicapp c:\test.txt domain\username 20321217 0 16

to set the access mask 20321217 type 0 and flag 16 for the user
domain\username to the file test.txt

Anyone got any ideas?

Thanks

Colin



Posted by Gabriel Citron on May 30, 2007, 9:13 am
Please log in for more thread options
You can use xcacls.vbs (http://support.microsoft.com/kb/825751), a more
powerful version of cacls, or you can customize the script as you need.

--
Gabi Citron

CEH, MCSE:Security, CCNA


"Colin Chaplin" wrote:

>
> What I want to do is apply a bunch of permissions to files (millions of
> files) and whilst most of the files will have permissions such as 'read
> only' some may be more exotic
>
>
> Therefore, I want to apply mask type and flags for a username directly to a
> file using their numberical values.
>
> I've googled a bit but can't see an app that does this... seems an obvious
> thing to do?
>
>
> for example my magical app would allow
>
>
> magicapp c:\test.txt domain\username 20321217 0 16
>
> to set the access mask 20321217 type 0 and flag 16 for the user
> domain\username to the file test.txt
>
> Anyone got any ideas?
>
> Thanks
>
> Colin
>
>
>

Posted by Roger Abell [MVP] on May 30, 2007, 11:32 am
Please log in for more thread options
xcacls.vbs which was mentioned and may be found at the
www.microsoft.com/downloads page can set any DACL
for NTFS objects.
However, since you will have a highly specific and varied
ACLing (from what you have said) it will be _extremely_
difficult to maintain if you just set things directly.
For that reason I recommend that you use the Security
Templates MMC snap-in and using the filesystem section
define a template to effect the ACLing you are after.
After the template is applied to the structure you will then
be able (at any future time) to analyze the structure with the
template to see what is not aligned to your specification and
optionally reapply to make it as specified. These later steps
are done with the Security Config and Analysis MMC snap-in.
When you define the template and save it you get a text file
which you can edit (notepad etc) so you only really need to
define the basic ACL patterns you are after and then can just
copy/paste and alter the target folder/file of the pasted.

Roger
>
> What I want to do is apply a bunch of permissions to files (millions of
> files) and whilst most of the files will have permissions such as 'read
> only' some may be more exotic
>
>
> Therefore, I want to apply mask type and flags for a username directly to
> a file using their numberical values.
>
> I've googled a bit but can't see an app that does this... seems an obvious
> thing to do?
>
>
> for example my magical app would allow
>
>
> magicapp c:\test.txt domain\username 20321217 0 16
>
> to set the access mask 20321217 type 0 and flag 16 for the user
> domain\username to the file test.txt
>
> Anyone got any ideas?
>
> Thanks
>
> Colin
>



Similar ThreadsPosted
Write Attributes and Write Extended Attributes October 31, 2005, 1:30 am
Write but no overwrite? June 5, 2007, 12:27 pm
LimitLogon utility May 25, 2007, 9:01 am
Allowing applets to create and write to a file June 8, 2005, 7:50 am
Wny Does Windows Want Write Extended Attributes for Users? August 4, 2005, 1:31 am
Location of SFPCOPY.EXE Utility? May 6, 2007, 11:19 am
How to non-trusted users write files to specific location December 15, 2005, 3:42 pm
utility to check certificate validity October 5, 2005, 8:51 am
looking for RRAS log file viewing utility May 11, 2006, 8:03 am
rmtshare.exe utility overwriting ACLs August 15, 2006, 4:48 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap