Hallo there!
I have a problem with SetACL. I'm trying to set permissions for user at c:\, the syntax I'm using is:
SetACL.exe -on "C:" -ot file -actn ace -ace "n:user;p:Read_ex" but nothing happendes to the permissions.
When I'm doing it for exampla o´n C:\peogram files it works allright. Any ideas someone?
Thanks!!
0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.

Answers

0
Why not make the users local admin as that would produce similar result.
Try to find out what exactly you need to open up.
Answered 05/05/2008 by: AngelD
Red Belt

  • I would like to know, why you wish to give permission to complete systemDrive, unless you have a locked down environment. If SetACL is failing, did u try it out with Cacls.exe which comes inbuilt in windows
Please log in to comment
0
The problem is that SetACL must be passed a full path, not a drive letter:

. SetACL.exe -on "C:\" -ot file -actn ace -ace "n:user;p:Read_ex"

However, I, like Kim (AngelD), am confused about how your users don't already have ReadExecute rights on the root of C:. You need to tread carefully here. I suggest some reading on Windows permissions would be a good starting point.
Answered 05/06/2008 by: VBScab
Red Belt

Please log in to comment
0
Your example will not work. Try something like that:

SetACL.exe -on "C:\\" -ot file -actn ace -ace "n:S-1-5-32-545;p:add_file;s:y;m:grant;i:np"
Processing ACL of: <\\?\C:\>
SetACL finished successfully.


cu Flo
Answered 06/25/2008 by: flo
Senior Yellow Belt

Please log in to comment
Answer this question or Comment on this question for clarity