Folder access rights

[Pierced Labret]

I work in a school with around 1700 students.

When we created the students user area folders, we gave
that pupil, and Domain Admin group access to the folder.

Now there are staff that sometimes need access, and have
to come to see us Administrators.

Is there any way to assign the Staff Group rights to
access students areas, without having to do each folder
individually?
As you can imagine having to do this to 1700 folders
would be a major job. But if I select multiple folders, I
can't load the security tab because they all have
different security settings (namely the students
themselves).

Any help would be greatly appreciated.

Thanks,
PL

 

[MSFT]

Hi PL!

There is not going to be an easy way to automate what you want to do.

Some VBScript coupled with Xcacls (Resource Kit) will probably allow you to
create the functionality you are looking for.

You can always put the teachers in a group that has acess to the parent
folder of the student area.
If the student area is inheriting permissions, this will give the teachers
access.

Hope this helps!

/Siddharth
PSS Security


--------------------

 

[Oli Restorick [MVP]]

If you just want to give another group access to the entire students folder,
it's very easy.

Suppose you have a directory on your server called D:\data\students and
inside this is every student's home folder and that you want to give the
Teachers group read access to it, the following command will do the trick.

cacls d:\data\students /t /e /g teachers:R

The /t makes the command recursive. /e specifies that the ACL will be
edited rather than replaced (i.e. it won't remove existing settings) and the
/g means "grant".

Hope this helps

Oli

 

[Pierced Labret]

Hi guys, thanks for the replies.

Unfortunately, the Students folders aren't in a seperate
folder to the staff ones, they're all just in one 'Users'
folder.
I guess the teachers will just have to wait until next
school year. Thanks.