How to add an ACE to an existing ACL on a large directory structure?

[Zapdoper]

We need to give this particular domain group the audit permission so members of this group can look at the permissions that are set in a tree or directory but at the same time not to have access to the data. We have tried Xcacls but this is limited to 256 characters in the path. Also Subinacls.exe was tested but no luck due to same issues 256 character limitation and cannot add advanced ACE entries.
Anyone has used fileacl.exe utility? Latest version claims not to be limited to 256 characters in the path. Anyone can give an idea how and what switches to use with this command line to accomplish the above task?

Thanks.

 

[itsp1965]

Have you tried creating a SUBSTituted drive (using the DOS SUBST command) which should help you get past the 256char issue. From there you can open the new drive and apply the ACE to the remaining folders/files.

 

[wcburton]

It may be overkill but have a look at the products at scriptlogic.com. We are using Security Explorer and WinCloak. Security Explorer may have benefits in helping you manage the security on an ongoing basis.

If you are not interested in a third pary product you could try a scripting solution.