ACL permissions

[johnsuth]

For XP Home, it seems that I can set finely graded permissions from
the security dialog within safe mode, or coarsely graded permissions
from CACLS.

Is there a mapping of permissions from CALCS to permissions in safe mode
security dialog?

I understand the finely graded safe mode permissions, but I am not sure
what exactly is allowed by the simplified CALCS permissions. e.g. there
is no delete permission in CALCS.

I ask because safe mode is a pain in the butt when maintaining identical
workstations on a LAN, and I would rather run a command file located on
a server. My file would start by revoking all permissions to clear
obsolete and duplicate entries from the ACL, then assigning just
what is currently neccessary.

 

[Torgeir Bakken \(MVP\)]

For XP Home, it seems that I can set finely graded permissions from
the security dialog within safe mode, or coarsely graded permissions
from CACLS.

Is there a mapping of permissions from CALCS to permissions in safe mode
security dialog?

I understand the finely graded safe mode permissions, but I am not sure
what exactly is allowed by the simplified CALCS permissions. e.g. there
is no delete permission in CALCS.

I ask because safe mode is a pain in the butt when maintaining identical
workstations on a LAN, and I would rather run a command file located on
a server. My file would start by revoking all permissions to clear
obsolete and duplicate entries from the ACL, then assigning just
what is currently neccessary.

Hi

Some other command line based tools that I would guess work
better for you:

1)
FILEACL.exe - NTFS Permissions command line tool
http://www.microsoft.com/downloads/...ea-34f0-4e6d-9a72-004d35de4e64&DisplayLang=en


2)
xcacls.vbs available for download here:

Download details: Extended Change Access Control List Tool (Xcacls)
http://www.microsoft.com/downloads/...24-0616-473c-b103-c35bc2820bda&displaylang=en


3)
SetACL.exe (freeware)
http://setacl.sourceforge.net/

 

[NobodyMan]

For XP Home, it seems that I can set finely graded permissions from
the security dialog within safe mode, or coarsely graded permissions
from CACLS.

Is there a mapping of permissions from CALCS to permissions in safe mode
security dialog?

I understand the finely graded safe mode permissions, but I am not sure
what exactly is allowed by the simplified CALCS permissions. e.g. there
is no delete permission in CALCS.

I ask because safe mode is a pain in the butt when maintaining identical
workstations on a LAN, and I would rather run a command file located on
a server. My file would start by revoking all permissions to clear
obsolete and duplicate entries from the ACL, then assigning just
what is currently neccessary.

Let's see if I have this down: you want to set access policies for
folders on XP Home boxes from your central server. Is that it?

Bad idea, in that environment (client/server) to use XP Home. Pro is
a much better choice and you can push your Group Policies down on the
workstations much easier.