Government Security
Network Security Resources

Jump to content

Photo

(Cmd Batch , Xp) Help In Set Ntfs Permissions ,gpo & Folder Rediraction

- - - - -
  • Please log in to reply
1 reply to this topic

#1 energydream2007

energydream2007

    Private

  • Members
  • 1 posts

Posted 12 September 2010 - 04:02 PM

Hallo all.

In need your help in compiling a batch file to a project , here is some info

Ok so iv 4 users (named testuser1 | testuser2 | testuser3 | testuser4)
and 2 groups (testmarketing | testsales)
testuser1 is an Administrator and the rest are normal Users.
testuser1 & testuser2 are members in testsales group.
testuser2 , 3 & 4 are members of testmarketing

also i have 3 folders - Market / Sales / All (the folders located in D partition)

testsales group members have Full Access to Sales folder.
testmarketing group members have Full Access to Market folder

(note that testuser2 are a member in both testmarketing & testsales groups.)


OK SO HOW TO DO THE FOLLOWING?

1. the folder named All - i want all users to have read permissions on that folder and the subfolders & files in it but only the creator owner of a subfolders & files will be able to delete them.

2. i need that the members of testsales group (testuser1 ,2) will be able to only read from the Market folder.

3. change the location of My Documents folder for all the users to be located in another partition from the default C (and to not have conflict between each user and his My Documents folder

4. how to set deny Full Access to the GPO folder (or any folder) to a specific user to prevent him from reading from it?

#2 bonarez

bonarez

    Retired GSO Second Lieutenant

  • Sergeant Major
  • 1,252 posts

Posted 13 September 2010 - 08:52 AM

You have a number of ways to do it:

/http://setacl.sourceforge.net/html/examples.html you can use batch/cmd if you're into that

/http://support.microsoft.com/kb/825751 xcacls the vbs way

/http://mshforfun.blogspot.com/2005/12/play-with-acl-in-msh.html or work with powershell, am currently using only this for setting ntfs permissions, only one that works on DFS's afaik
"Ask the right question and you will receive the right answer. I'm just very sensitive about the right syntax"

Read the rules before you post