I need to change permissions on a number of computers.  When I do it via GPO I cannot break it down to just the machines that need it as all PC's sit in the Misc Computers group.  Only a certain subset of PC's need these file permission modifications.  What's the best way to do this with the K1 as GPO isn't cutting it for me.  Permissions are not applying via GPO for some reason on some PC's but are on others even though they are all in the same group.  

Any help would be greatly appreciated.

Answer Summary:
Per SMal.tmcc's recommendation I created a batch file using icacls to set the permissions. I first had a verify to see if the file was there then on success run the batch file. Worked like a charm once I figured out the correct folder versus file flags.
0 Comments   [ + ] Show Comments


Please log in to comment



you may have to force a gpupdate or reboot a couple of times to get the full effect of a gpo.  Typically one boot changes the settings and the next boot carries them out.

you can create a script and use cacls or icacls to set permissions


Answered 06/03/2014 by: SMal.tmcc
Red Belt

  • Yeah this has been sitting for over a week and it's not updating after numerous reboots. the domain is running fine and the GPO is listed in the gpresults but it's not applying.

    I tried using icacls and it says it applies but it doesn't. I need it to apply domain security group permissions to folders and files and it's just not working either.
    • who is the owner of these folders?
      • I did a little more digging. I needed to change the flags on icacls for each file/folder. I had them backwards. Thanks for your help!
      • cool
Please log in to comment
Answer this question or Comment on this question for clarity