xcacls flags question

[William Hymen]

All,

I am looking for an example xcacls AD command
to set read permission on a folder for a user
or group, but prohibit the subfolders from
inheriting the permissions. (this is equivalent
to the "advanced -> edit - [this folder only] dropdown")

I have numerous subfolders and only want to grant
access to one or two, but ALL users will need
read access to the parent.

Second, what flags would I use to
prohibit all access to the C:\ drive for
the group or user.

I am managing a secure ftp ID and I really need
to clamp down hard on access rights when using
cygwin on my server.

Thanks in advance-

Bill

 

[Jerold Schulman]

All,

I am looking for an example xcacls AD command
to set read permission on a folder for a user
or group, but prohibit the subfolders from
inheriting the permissions. (this is equivalent
to the "advanced -> edit - [this folder only] dropdown")

I have numerous subfolders and only want to grant
access to one or two, but ALL users will need
read access to the parent.

Second, what flags would I use to
prohibit all access to the C:\ drive for
the group or user.

I am managing a secure ftp ID and I really need
to clamp down hard on access rights when using
cygwin on my server.

Thanks in advance-

Bill

See tip 8225 » The Extended Change Access Control List tool (Xcacls.vbs) has been enhanced and replaces Xcacls.exe.
in the 'Tips & Tricks' at http://www.jsifaq.com

Use /SPEC A for "This Folder Only"

To prohibit access to the C: drive on your FTP server, Deny users Read permission, and remove Admins from the users group.

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com