How to make conditional NTFS permission changes

[James Wright]

Is there a way of conditionally making ntfs permission
changes?

using xcacls, I can "edit" an existing acl with /e and
propogate down a tree with /t.

What I want to do is modify permissions of an exisitng
group or user in an acl, and propogate down through a tree
and change say CHANGE (RWXD) to (RXD)only but where the
acl is already READ or LIST don't modify them.

Put another way I wish to propogate the restriction of
RWXD to RXD without additionally giving RXD where
currently only RX or List exisits

 

[Jerold Schulman]

Is there a way of conditionally making ntfs permission
changes?

using xcacls, I can "edit" an existing acl with /e and
propogate down a tree with /t.

What I want to do is modify permissions of an exisitng
group or user in an acl, and propogate down through a tree
and change say CHANGE (RWXD) to (RXD)only but where the
acl is already READ or LIST don't modify them.

Put another way I wish to propogate the restriction of
RWXD to RXD without additionally giving RXD where
currently only RX or List exisits

You can use a FOR command to cause a DIR to navigate the tree, and use CACLS in
a FOR command to test the permission of an object before setting it.

Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com