PC Review Forums Newsgroups Windows XP Windows XP Security adding rights via command line

Reply

adding rights via command line

 
Thread Tools Rate Thread
Old 10-10-2003, 10:02 PM   #1
pvl
Guest
 
Posts: n/a
Default adding rights via command line


Is there a command line utility or procedure that I can use to grant
local file system AND registry rights to users on their own machines?

IE -- users logon to a machine as "users" only, but I want to grant them
certain rights to the file system and to the registry so that they can
run particular programs from CD. I know what rights to assign, but I
just want to be able to create a batch file to do it.

Is that possible?

  Reply With Quote
Old 10-10-2003, 11:29 PM   #2
Doug Knox MS-MVP
Guest
 
Posts: n/a
Default Re: adding rights via command line

Use CACLS.EXE for files. CACLS.EXE /? will get you the command line
options.

For the Registry:

http://support.microsoft.com/?id=245031

--
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"pvl" <peter.vanlone@mbtmadison.com> wrote in message
news:u2io8l2jDHA.2500@TK2MSFTNGP10.phx.gbl...
> Is there a command line utility or procedure that I can use to grant
> local file system AND registry rights to users on their own machines?
>
> IE -- users logon to a machine as "users" only, but I want to grant them
> certain rights to the file system and to the registry so that they can
> run particular programs from CD. I know what rights to assign, but I
> just want to be able to create a batch file to do it.
>
> Is that possible?
>



  Reply With Quote
Old 11-10-2003, 03:55 PM   #3
Torgeir Bakken (MVP)
Guest
 
Posts: n/a
Default Re: adding rights via command line

pvl wrote:

> Is there a command line utility or procedure that I can use to grant
> local file system AND registry rights to users on their own machines?
>
> IE -- users logon to a machine as "users" only, but I want to grant them
> certain rights to the file system and to the registry so that they can
> run particular programs from CD. I know what rights to assign, but I
> just want to be able to create a batch file to do it.


Hi

This little nice freebie might help you out:

SetACL.exe: SetACL - Windows permission management: Set permissions on
virtually anything
http://setacl.sourceforge.net/

SetACL can set permissions on:

Local or remote directories
Local or remote files
Local or remote printers
Local or remote registry keys
Local or remote Win32 services
Local or remote network shares



--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter


  Reply With Quote
Old 13-10-2003, 04:39 AM   #4
pvl
Guest
 
Posts: n/a
Default Re: adding rights via command line

excellent -- thank you much!

Torgeir Bakken (MVP) wrote:
> pvl wrote:
>
>
>>Is there a command line utility or procedure that I can use to grant
>>local file system AND registry rights to users on their own machines?
>>
>>IE -- users logon to a machine as "users" only, but I want to grant them
>>certain rights to the file system and to the registry so that they can
>>run particular programs from CD. I know what rights to assign, but I
>>just want to be able to create a batch file to do it.

>
>
> Hi
>
> This little nice freebie might help you out:
>
> SetACL.exe: SetACL - Windows permission management: Set permissions on
> virtually anything
> http://setacl.sourceforge.net/
>
> SetACL can set permissions on:
>
> Local or remote directories
> Local or remote files
> Local or remote printers
> Local or remote registry keys
> Local or remote Win32 services
> Local or remote network shares
>
>
>
> --
> torgeir
> Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of the 1328 page
> Scripting Guide: http://www.microsoft.com/technet/scriptcenter
>
>


  Reply With Quote
Old 13-10-2003, 04:40 AM   #5
pvl
Guest
 
Posts: n/a
Default Re: adding rights via command line

excellent ... I searched the knowledge base only for XP, and did not
think to expand it to nt 4.

Do you think the registry component will still work in XP? Is the
utility still available (I think I still have an nt 4 resource kit
SOMEWHERE ...)?

Peter

Doug Knox MS-MVP wrote:

> Use CACLS.EXE for files. CACLS.EXE /? will get you the command line
> options.
>
> For the Registry:
>
> http://support.microsoft.com/?id=245031
>


  Reply With Quote
Old 13-10-2003, 05:05 AM   #6
Doug Knox MS-MVP
Guest
 
Posts: n/a
Default Re: adding rights via command line

I'm not sure if REGINI from the NT4 resource kit will work or not. I'd
trust the one from the 2K resource kit first.

--
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Associate Expert
ExpertZone - http://www.microsoft.com/windowsxp/expertzone
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"pvl" <peter.vanlone@mbtmadison.com> wrote in message
news:uvxKtNTkDHA.1740@TK2MSFTNGP12.phx.gbl...
> excellent ... I searched the knowledge base only for XP, and did not
> think to expand it to nt 4.
>
> Do you think the registry component will still work in XP? Is the
> utility still available (I think I still have an nt 4 resource kit
> SOMEWHERE ...)?
>
> Peter
>
> Doug Knox MS-MVP wrote:
>
> > Use CACLS.EXE for files. CACLS.EXE /? will get you the command line
> > options.
> >
> > For the Registry:
> >
> > http://support.microsoft.com/?id=245031
> >

>



  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off