Windows Folder Security 1

[Diffy1]

Hi

Wondering if someone can assist with this basic query:

On a W2K3 have a top level share that only has basic permissions for a user group (read&exec/list/read). This ensures that the root directors from the folder share can’t be amend/deleted/ or new ones created.

However I want to go one step further and lock down each directory (only) within each root folder at that level so users can’t delete/move/add folders. However I want its contents (files and folders) not to inherit these permissions (giving users full control over the content).

EG.

Share (read&exec/list/read)
- Folder1
- Folder2
- Sub folder (to have read&exec/list/read?)
- Any files/folders don’t inherit permissions.

Is just a case of giving "sub folder" read&exec/list/read and manually selecting full access for each folder within. Or is there a way for children not to inherit the permissions above.

 

[itsp1965]

If you go into the subfolder-->click on Advanced there is the checkbox to for allowing inheritable rights to propagate from the parent. You can check this off, and change the security for the sub-folder accordingly

 

[Diffy1]

Thanks for the response! If you can multi-select sub folders and select properties/security/advanced and remove inherit then great!

Problem is that these would need to be applied to each set as sub folders as there are about 100+ folders in the root!

If this is the only way! Thanks again!

 

[itsp1965]

Well if this is the case, try using the XCACLS tool from the Windows Resource Kit, you can create a batch file to apply the securities to your liking