Inheritance of rights

[Rockitman]

Our office just went through a migration where the
contents of a Novell Netware 3.11 server were migrated to
a new Windows 2000 server. The person in charge of the
migration used an application called Net IQ which not only
transferred the files but also all the security attributes
as well. This guy is gone now but I have found something
that I don't know how to fix. There are 2 administrators
in our office, myself and another person. It appears that
my rights have transferred well but the other person's did
not. As a result, she does not have rights to many
directories and I am confused as to how to apply full
rights for her.
In Novell, if a user has rights in a parent directory,
they automatically propogate down to the children. It
appears this is not the case in Windows 2000 because when
I gave her full rights to the parent directories, they did
not propogate down. I am also aware of the Advanced tab
in Security and the check box for "reset permissions on
all child objects and enable propogation of inheritable
objects", but this will work against me as it will replace
what ever security is in these child objects with what is
in the parent. I don't want to do this, I just want this
administrator's rights to propogate down to the children
without touching what is already set in these children.
Can anybody help here? I don't want to spend hours upon
hours assigning this administrator full rights to each and
every directory on this server.

 

[Steven Umbach]

Normally the administrators group has full control to all folders on a W2K
installation and you don't want to add individuals, instead they get their
rights from group membership such as the administrators group [which also would
be owner on most folders and files]. You might want to look at using xcacls
[part of the free support tools] to add the administrators group to the folder
permissions but test it out on a test folder first and be sure to have a full
backup of your server in case things do not go as planned which is always best
practice. To grant administrators full control to folder test and it's
files/subfolder on drive c use " xcacls c:\test *.* /g administrators:f /t /e
/c " Be sure to use /e as it will edit existing permissions instead of replacing
them. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;318754
http://support.microsoft.com/default.aspx?scid=kb;en-us;265360
http://www.ss64.com/nt/xcalcs.html

 

[Steven Umbach]

I should add that you may want to try without the *.* first which may not be
needed and save time. --- Steve

Normally the administrators group has full control to all folders on a W2K
installation and you don't want to add individuals, instead they get their
rights from group membership such as the administrators group [which also would
be owner on most folders and files]. You might want to look at using xcacls
[part of the free support tools] to add the administrators group to the folder
permissions but test it out on a test folder first and be sure to have a full
backup of your server in case things do not go as planned which is always best
practice. To grant administrators full control to folder test and it's
files/subfolder on drive c use " xcacls c:\test *.* /g administrators:f /t /e
/c " Be sure to use /e as it will edit existing permissions instead of replacing
them. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;318754
http://support.microsoft.com/default.aspx?scid=kb;en-us;265360
http://www.ss64.com/nt/xcalcs.html

Our office just went through a migration where the
contents of a Novell Netware 3.11 server were migrated to
a new Windows 2000 server. The person in charge of the
migration used an application called Net IQ which not only
transferred the files but also all the security attributes
as well. This guy is gone now but I have found something
that I don't know how to fix. There are 2 administrators
in our office, myself and another person. It appears that
my rights have transferred well but the other person's did
not. As a result, she does not have rights to many
directories and I am confused as to how to apply full
rights for her.
In Novell, if a user has rights in a parent directory,
they automatically propogate down to the children. It
appears this is not the case in Windows 2000 because when
I gave her full rights to the parent directories, they did
not propogate down. I am also aware of the Advanced tab
in Security and the check box for "reset permissions on
all child objects and enable propogation of inheritable
objects", but this will work against me as it will replace
what ever security is in these child objects with what is
in the parent. I don't want to do this, I just want this
administrator's rights to propogate down to the children
without touching what is already set in these children.
Can anybody help here? I don't want to spend hours upon
hours assigning this administrator full rights to each and
every directory on this server.