Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Remove user permission out of User Object ACL 1

Status
Not open for further replies.

xylax

MIS
Oct 14, 2005
31
US
I need some help on removing an ACL from all user objects in my domain. I have a user that has 'send as' rights on every account in my domain. The rights are not propagating from the parent folder. Is there any script that can be run to remove that particular ACL from all the accounts in one swoop?

Shon
Network Administrator
 
Some article regarding you issue

How to use Xcacls.vbs to modify NTFS permissions

How to Use CACLS.EXE in a Batch File

If you search with the keywords : "acl" and "modify" and "domain" I am sure will find something that can help you.

Regards,
Cengiz Kuskaya
 
Unfortunately, XCACLS only changes permissions and ACLs on NTFS Files and folders. I need something that can change permissions on all user accounts. To be more specific, I need the exact opposite of what the SetSendAsPermission.exe program does.

Shon
Network Administrator
 
I think,

this is what you are looking for

How to Use Dsacls.exe in Windows Server 2003 and Windows 2000

Dsacls.exe is a command-line tool that you can use to query the security attributes and to change permissions and security attributes of Active Directory objects. It is the command-line equivalent of the Security tab in the Windows Active Directory snap-in tools such as Active Directory Users and Computers and Active Directory Sites and Services.

Regards,
Cengiz Kuskaya
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top