iCACLS .. Woops.

[jmair]

I've been using Cacls for a while where I have shared folders by graduation year and inside are the users folders named after their login. Cacls has worked great untill I started to play with inheritance.

 

I somehow removed all inheritance and I think the owner of subfolders. I've been playing with it for some time and can't get those permissions just right again. the switch I used to mess up these folders was /inheritance:r

 

 

Here is my current script.

for /D %%I in (*) DO iCACLS.exe "%%I" /T /grant "parkcounty.int\%%I":M "parkcounty.int\Domain Admins":F  "parkcounty.int\teachers":M
pause

 

I need

 

StudentFolder

+Domain Admin - Full

+Student - Modify

+Teacher - Modify

On just this folder and all files and folders inside StudentFolder, but NOT to inherit from parent folder.

 

 

Thanks in advance.

[jmair]

ok. got it.

 

At the parent folder, I changed the Owner and enabled it to change all subfoldes/files.

I then enabled inheritable to replace all child files/folders with parent folders.

I then went to the child folders and ran the below script. .. so far so good.

for /D %%I in (*) DO iCACLS.exe "%%I" /t /grant "parkcounty.int\%%I":(OI)(CI)M "parkcounty.int\Domain Admins":(OI)(CI)F "parkcounty.int\administrator":(OI)(CI)F "parkcounty.int\teachers":(OI)(CI)M
pause

[maxepotter]

Thanks....