iCACLS .. Woops.

[jmair]

I've been using Cacls for a while where I have shared folders by graduation year and inside are the users folders named after their login. Cacls has worked great untill I started to play with inheritance.

I somehow removed all inheritance and I think the owner of subfolders. I've been playing with it for some time and can't get those permissions just right again. the switch I used to mess up these folders was /inheritance:r


Here is my current script.

for /D %%I in (*) DO iCACLS.exe "%%I" /T /grant "parkcounty.int\%%I":M "parkcounty.int\Domain Admins":F  "parkcounty.int\teachers":M
pause

I need

StudentFolder
+Domain Admin - Full
+Student - Modify
+Teacher - Modify
On just this folder and all files and folders inside StudentFolder, but NOT to inherit from parent folder.


Thanks in advance.

[jmair]

ok. got it.

At the parent folder, I changed the Owner and enabled it to change all subfoldes/files.
I then enabled inheritable to replace all child files/folders with parent folders.
I then went to the child folders and ran the below script. .. so far so good.

for /D %%I in (*) DO iCACLS.exe "%%I" /t /grant "parkcounty.int\%%I":(OI)(CI)M "parkcounty.int\Domain Admins":(OI)(CI)F "parkcounty.int\administrator":(OI)(CI)F "parkcounty.int\teachers":(OI)(CI)M
pause

[maxepotter]

Thanks....