Someone help me how to use icalcs for assigning permission to files, subfolders, registry

0 Comments   [ + ] Show Comments

Comments

Please log in to comment

Community Chosen Answer

1

take a look at the Technet page about Icacls:

http://technet.microsoft.com/en-us/library/cc753525.aspx

for subfolder you can best read this technet thread:

http://social.technet.microsoft.com/Forums/windowsserver/en-US/cae0f889-8851-4a38-a2e8-6d63a1964a2e/grant-right-to-subfolders-with-icacls

icacls cant be used to set registry permissions, you can use regini.exe for this job:

http://support.microsoft.com/kb/237607

Answered 09/13/2013 by: petryb
Third Degree Brown Belt

  • regini.exe is free tool i mean built in utility of windows7? Like icalcs
    • Microsoft itself says to use regini.exe, so i asume that Windows doesnt contain a build in utility
      http://support.microsoft.com/kb/264584
  • Just call your sysadmin or someone with administration skills on windows and let them do the filesystem security through Group policy. That way you won't F&@& up users systems through ignorance.

    (edited by admin for language)
  • This content is currently hidden from public view.
    Reason: Removed by member request
    For more information, visit our FAQ's.
Please log in to comment

Answers

0

Many moons ago, before we got Kace, we used some custom scripts to modify permissions on multiple computers.  Perhaps they might help you.  

 

You need three files to make this work:

calcs.exe

comp1.txt (a list of computer names, IP addresses, or DNS records)

theScriptFile.vbs

Basically you run the script from a computer that is logged in as an account that can access c$ on other computers; i.e. Domain Admin.  When you run the script it will prompt you to identify what directory you want to change, for what group or user, and what type of permission you would like to assign.  

 

 

 

Dim ostrcomputerDim oFilenameDim strSPDim oComputerDim directoryToUpdateDim ParmToWhomDim parmType  Set StdIn = WScript.StdInSet StdOut = WScript.StdOut  oFilename = "comp1.txt"'content of file can be NetBIOS name, IP Address, or FQDN (must be registered in DNS server)of the client computer  Wscript.Echo "Directory to update: (Example: documents and settings\all users...)" & vbcrlfdirectoryToUpdate = StdIn.ReadLineWscript.Echo "" & vbcrlf Wscript.Echo "Give Permission to what user/group (domain users, users, everyone, etc.): " & vbcrlf ParmToWhom = StdIn.ReadLineWscript.Echo "" & vbcrlf Wscript.Echo "Give what type of permission (R for Read, C for Change, F for Full): " & vbcrlf parmType = StdIn.ReadLineWscript.Echo "" & vbcrlf ' Open file to read, No error handling for opening fileSet oFs = createObject("Scripting.FilesystemObject")Set TS = OFs.OpenTextFile(oFilename,1)Do Until ts.AtEndOfStream  ostrComputer = TS.Readline  Wscript.echo ostrComputer ' Copy file to Destination' current destination is All users profiles' Desktop folder'***************************************************Set oShell = CreateObject("WScript.Shell") Call oShell.Run("cmd /c cacls.exe " & Chr(34) & "\\" & ostrcomputer & "\c$\" & directoryToUpdate & Chr(34) & " /e /t /g " & Chr(34) & ParmToWhom & Chr(34) & ":" & parmType) wscript.echo "cmd /c cacls.exe " & Chr(34) & "\\" & ostrcomputer & "\c$\" & directoryToUpdate & Chr(34) & " /e /t /g " & Chr(34) & ParmToWhom & Chr(34) & ":" & parmType If Err.number <> 0 Then          ' File couldn't be copiedWscript.Echo "Failed." & vbcrlf     Else If err.number = 0 Thenwscript.echo "Successfull." & vbcrlf        End If End IfLoopWscript.quit 
Answered 09/13/2013 by: Jbr32
Tenth Degree Black Belt

  • This is one more way of doing it..best part about this is both file ,folder orand regisrty permission can be managed by this
    http://www.itninja.com/blog/view/using-secedit-to-apply-security-templates
Please log in to comment
Answer this question or Comment on this question for clarity

Share