share Permissions problem

[kalpeshbhoyar]

Hi,

We had migrated from NT domain to win2k3 domain. We are using Hitachi
filers for file shares. After migration when we are trying to add any
group for all the shares on these shares it's taking very log time.
Even if i add any group or the member to root share with full access
that member or group is not getting access to all the sub folders and
it's sub folder. If I add the group or member to share and inherit
the access permission then I am getting access to all folder but it
removing all the existing permission. Is there any solution for this
or any tool through which I can add group or member to all shares and
it's sub folders with out changing any other permission.

Please help me??

 

[Steven L Umbach]

For NTFS permissions you should be able to add a group without changing
existing permissions. If you have to "uninherit" permissions on the folder
you are working on you should have the option to remove or copy existing
permissions and if you select copy then you can just add the new group to
the list after copying permissions. If you are using a command line tool
such as cacls make sure you are using the right syntax as to "edit" existing
permissions. There are also command line tools like xcacls.vbs and fileacl
that allow you to be very flexible in assigning NTFS permissions. Also with
Windows 2003 make sure you understand "special" permissions that did not
exist in NT4.0. Special permissions allows you to apply permissions based on
the selections available in the "apply onto" box such as files only or
folders/subfolders/files. The link for NTFS for XP will explain special
permissions in more detail. Also try not to use deny permissions when
assigning permissions as no permission is an implicit deny and in W2003 it
is possible for an inherited deny to be overridden by an explicit allow or
an allow that is assigned "closer" in the path to the object even if both
show as inherited. Beware that xcacls.vbs and fileacl are very powerful
utilities so I suggest that you try them out on a test computer and have a
full backup of any server you want to run them on.

Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419 --- Special
permissions
http://support.microsoft.com/kb/825751 -- xcacls.vbs
http://www.jsifaq.com/SF/Tips/Tip.aspx?id=10080 --fileacl
http://technet2.microsoft.com/Windo...5a2e-4001-b659-0c23c90f76f61033.mspx?mfr=true