subinacl - can't grant multiple permissions?

[Guest]

Hi:

I'm using subinacl (newest version) to modify the permissions for all the
printers on my network. It's worked perfectly for giving single permissions
to groups (i.e. either Full, or Manage, or Print), but I've run into a
problem with trying to give one group both the Print and Manage Documents
permissions.

This line works for me to grant a single permission on printer 1 to mygroup
(in this case, the Print permission):

subinacl /printer “\\myserver\printer 1" /grant=dom\mygroup=p

According to the documentation, I should be able to add two permissions on
the same line like this:

subinacl /printer “\\myserver\printer 1" /grant=dom\mygroup=pm

but when I try that, the command fails altogether. I've also tried granting
the Print permission, then running subinacl again to grant the Manage
Documents permission. When I do that, Print permission is removed and the
Manage Documents permission added.

How can I get both permissions added? Anyone know what I'm doing wrong?
Thanks for any help you can give.

 

[Herb Martin]

I'm using subinacl (newest version) to modify the permissions for all the

printers on my network. It's worked perfectly for giving single permissions
to groups (i.e. either Full, or Manage, or Print), but I've run into a
problem with trying to give one group both the Print and Manage Documents
permissions.

Well, unless you deny Print, Manage Documents includes
that so don't bother.

 

[Guest]

Unfortunately Manage Documents permission does not automatically include the
Print permission. I still have the problem.

 

[Herb Martin]

Unfortunately Manage Documents permission does not automatically include the
Print permission. I still have the problem.

Must be an oddity of subinacl.exe.

Download SetAcl.exe (free) from Sourceforge.net.

It has the world's most irritatingly complex command
line but it will change more any permissions programatically.

 

[Jerold Schulman]

Hi:

I'm using subinacl (newest version) to modify the permissions for all the
printers on my network. It's worked perfectly for giving single permissions
to groups (i.e. either Full, or Manage, or Print), but I've run into a
problem with trying to give one group both the Print and Manage Documents
permissions.

This line works for me to grant a single permission on printer 1 to mygroup
(in this case, the Print permission):

According to the documentation, I should be able to add two permissions on
the same line like this:
but when I try that, the command fails altogether. I've also tried granting
the Print permission, then running subinacl again to grant the Manage
Documents permission. When I do that, Print permission is removed and the
Manage Documents permission added.

How can I get both permissions added? Anyone know what I'm doing wrong?
Thanks for any help you can give.

Have you tried:
subinacl /printer “\\myserver\printer 1" /grant=dom\mygroup=p /grant=dom\mygroup=m


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com

 

[Guest]

Yes, I tried that, but found that the second command replaced the permission
granted in the first, rather than adding to it.

 

[Guest]

SetACL did it! I was able to use the -ace parameter twice in the command line
and set the permissions I needed. Thank you for pointing me in the right
direction!

 

[Herb Martin]

SetACL did it! I was able to use the -ace parameter twice in the command line
and set the permissions I needed. Thank you for pointing me in the right
direction!

Cool. Your welcome.

You don't seem to have had must trouble with the SetAcl
command syntax (but then again you might have worked on
this all night <grin>)