Modifying 'Special Permissions' on windows in command line

[Stese]

Hi,
I've created a 'mailbox' folder for our students to 'post' work files for teachers to be able to get hold of, but can;t view other files or delete etc. I've got all the permissons correct over the folders, some of which are' special' permissoins.

I now need to create the folders for the rest of the staff, and need to set the permissions.

Normally i would use CACLS and a batch file ot do the work for me, but as i'm using 'special' permissions, it seems the only way i can do this is go get the SID of each user and write a 'SDDL' string to set the permissions.

I'd like to know if this is the only way of setting 'special' permissions on folders, in command line, in server 2003.

the permissions iw ould like to set are Traverse Folder, List Folder, Read Attributes, Read Extended Attributes and finally Delete subfolders and files.

MTIA,

Regards

Steven Davison

[Geoff]

Use xcacls instead.

http://support.microsoft.com/?id=825751

[ajbritton]

Or for ultimate control, try SETACL

http://setacl.sourceforge.net/

[SpuffMonkey]

I'm think of setting up a similar thing myself - any chance you could post or pm me the permissions you've worked out, to save me working it out myself? Thanks