Propagating permissions to child Objects

[Guest]

We have a directory tree that we want to have each levels permissions
assigned separately, so have cleared the “allow inheritable permissions from
parent to propagate to this objectâ€. The tree has many layers of subfolders.

Now we need to add someone to the top layer and need to have her rights
propagate to all the child objects, while leaving the other permissions in
place, as she is going to become responsible for giving users permissions.
How do I do this without adding her manually to every folder?

Thanks for your help – I’m a security newbie and the experienced person is
on vacation (why do these issues always come up when your backup is away???).

 

[Roger Abell [MVP]]

You have disallowed inheritance at multiple locations.
Thus, NTFS grants in the parental chain above those
location will have no impact at or past the points where
inheritance is blocked.

You want the cake and to eat it.

Probably the best you could do is to script the change,
adding the new group at each point, or, if you had the
prior insight to define this permissioning structure in
a security template you could just paste the new grant
into each line in the Filesystem section for the structure.

Perhaps you ought go to MS.com/downloads and get
xcacls.vbs and then make a batch file that will execute
this X times for the X points where inheritance is blocked.

Roger