[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference decwet::windows-nt

Title:Windows NT
Notice:See note 15.0 for HCL location
Moderator:TARKIN::LIN.com::FOLEY
Created:Thu Oct 31 1991
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:6086
Total number of notes:31449

5956.0. "Comandline interface for Filepermisions??" by TINGAU::HEFELE (Kaufbeuren, Germany) Sat Apr 26 1997 07:11

    dose anyboady know of a utility to set the file and share permissions
    on a NTFS partition from the commandline??
    
    (The good old $Set File /ACL=(USer1=r+w+e+d,User2=r+e) ...) :-)
    
    
    Frido!
T.RTitleUserPersonal
Name		DateLines
5956.1PYRO::RONRon S. van ZuylenSat Apr 26 1997 23:479
    For file permissions... How about CACLS?
    
    Typing "HELP" from the command line lists this and all other supported
    command line utilities.
    
    I'd stay away from share permissions... use file permission.  (Unless,
    of course, you are using FAT or HPFS... where it isn't an option.)
    
    --Ron
5956.2DECWET::KOWALSKIOfficial Beer Test DummieMon Apr 28 1997 09:136
    Just a caution: I have a hazy recollection from some testing I did
    awhile ago that CACLS is not capable of exactly duplicating all the 
    functionality of the GUI w.r.t security attributes.  
    
    
    mark
5956.3What's (OI)(CI)(IO)??TINGAU::HEFELEKaufbeuren, GermanyTue Apr 29 1997 01:1417
    RE: .-2
    
     THaks for the input It worked OK.
    
    RE: .-1
    
     Yes I have seen this, but the funktionality is OK for my usage. But I
    have another question.
    
    If I use CACLS for dispalying the permission I get an output like
    
    D:\MSOffice Everyone:F
                Everyone:(OI)(CI)(IO)F
    
    what meens the OI CI IO in the brackets??
    
    Frido!
5956.4technetLEXSS1::PUCHRIKCooler MasterTue Apr 29 1997 06:3099
      
    PSS ID Number: Q123647
    Article last modified on 06-30-1995
    PSS database name: WINNT
     
    3.5
     
    WINDOWS
     
    
    ----------------------------------------------------------------------
    The information in this article applies to:
     
     - Microsoft Windows NT Workstation version 3.5
     - Microsoft Windows NT Server version 3.5
    ----------------------------------------------------------------------
     
    Administrators and users with the Change Permissions enabled, can use
    the
    CACLS command to show or modify Access Control Lists (ACLs) for
    directories
    and files.
     
    If you query ACLs for directories the output is a listing of the
    permissions on the directory and the files inside the directory.
     
    Under File Manager in the Directory Permissions dialog box, the first
    set
    of parentheses contain directory permissions and the second set contain
    file permissions. However, for CACLS it is nearly backwards; the first
    listing of a group or user contains the file permissions while the
    second
    listing contains the directory permissions. The letters in parentheses
    represent the access control entry (ACE) header inheritance flags set
    for
    the object and container:
     
    File Permissions:
     
       OI = MSG_CACLS_OBJECT_INHERIT
     
       References permissions for files copied to or created in this
    directory.
       This ACE is inherited by noncontainer objects, such as files created
       within the container object to which the ACE is assigned.
     
       IO = MSG_CACLS_INHERIT_ONLY
     
       References permissions for files copied to or created in this
    directory.
       This ACE does not apply to the container object, but to objects
       contained by it.
     
    Normally both references are displayed.
     
    Directory Permissions:
     
       CI = MSG_CACLS_CONTAINER_INHERIT
     
       References permissions for the directory and directories copied to
    or
       created in this directory. This ACE is inherited by container
    objects,
       such as directories.
     
       NP = MSG_CACLS_NO_PROPAGATE_INHERIT
     
       Displayed when a permission is not to be inherited. The
       MSG_CACLS_OBJECT_INHERIT and MSG_CACLS_CONTAINER_INHERIT bits are
    not
       propagated to an inherited ACE.
     
    A directory's ACL will normally contain at least two ACEs. If CACLS
    output
    only contains one ACE, then permissions for the other ACE have not been
    specified. File Manager in this case will display the ACE as "(Not
    Specified)".
     
    REFERENCES
    ==========
     
    If special access ACE's have been specified, standard and specific
    access
    mask types are displayed. References for these masks can be found in
    the
    Windows NT Resource Kit, Chapter 2.
     
    Additional references can be found in the Windows NT SDK, chapter 49
    Programmer's Reference Volume 3.
     
    KBCategory: kbenv
    KBSubcategory: ntutil
    Additional reference words: prodnt 3.50
    =============================================================================
    Copyright Microsoft Corporation 1995.