/build/static/layout/Breadcrumb_cap_w.png

Someone help me how to use icalcs for assigning permission to files, subfolders, registry

Someone help me how to use icalcs for assigning permission to files, subfolders, registry


0 Comments   [ + ] Show comments

Answers (2)

Posted by: anonymous_89761 10 years ago
Third Degree Brown Belt
1

take a look at the Technet page about Icacls:

http://technet.microsoft.com/en-us/library/cc753525.aspx

for subfolder you can best read this technet thread:

http://social.technet.microsoft.com/Forums/windowsserver/en-US/cae0f889-8851-4a38-a2e8-6d63a1964a2e/grant-right-to-subfolders-with-icacls

icacls cant be used to set registry permissions, you can use regini.exe for this job:

http://support.microsoft.com/kb/237607


Comments:
  • regini.exe is free tool i mean built in utility of windows7? Like icalcs - sccmghost 10 years ago
    • Microsoft itself says to use regini.exe, so i asume that Windows doesnt contain a build in utility
      http://support.microsoft.com/kb/264584 - anonymous_89761 10 years ago
  • Just call your sysadmin or someone with administration skills on windows and let them do the filesystem security through Group policy. That way you won't F&@& up users systems through ignorance.

    (edited by admin for language) - EVEEN 10 years ago
Posted by: Jbr32 10 years ago
10th Degree Black Belt
0

Many moons ago, before we got Kace, we used some custom scripts to modify permissions on multiple computers.  Perhaps they might help you.  

 

You need three files to make this work:

calcs.exe

comp1.txt (a list of computer names, IP addresses, or DNS records)

theScriptFile.vbs

Basically you run the script from a computer that is logged in as an account that can access c$ on other computers; i.e. Domain Admin.  When you run the script it will prompt you to identify what directory you want to change, for what group or user, and what type of permission you would like to assign.  

 

 

 

Dim ostrcomputerDim oFilenameDim strSPDim oComputerDim directoryToUpdateDim ParmToWhomDim parmType  Set StdIn = WScript.StdInSet StdOut = WScript.StdOut  oFilename = "comp1.txt"'content of file can be NetBIOS name, IP Address, or FQDN (must be registered in DNS server)of the client computer  Wscript.Echo "Directory to update: (Example: documents and settings\all users...)" & vbcrlfdirectoryToUpdate = StdIn.ReadLineWscript.Echo "" & vbcrlf Wscript.Echo "Give Permission to what user/group (domain users, users, everyone, etc.): " & vbcrlf ParmToWhom = StdIn.ReadLineWscript.Echo "" & vbcrlf Wscript.Echo "Give what type of permission (R for Read, C for Change, F for Full): " & vbcrlf parmType = StdIn.ReadLineWscript.Echo "" & vbcrlf ' Open file to read, No error handling for opening fileSet oFs = createObject("Scripting.FilesystemObject")Set TS = OFs.OpenTextFile(oFilename,1)Do Until ts.AtEndOfStream  ostrComputer = TS.Readline  Wscript.echo ostrComputer ' Copy file to Destination' current destination is All users profiles' Desktop folder'***************************************************Set oShell = CreateObject("WScript.Shell") Call oShell.Run("cmd /c cacls.exe " & Chr(34) & "\\" & ostrcomputer & "\c$\" & directoryToUpdate & Chr(34) & " /e /t /g " & Chr(34) & ParmToWhom & Chr(34) & ":" & parmType) wscript.echo "cmd /c cacls.exe " & Chr(34) & "\\" & ostrcomputer & "\c$\" & directoryToUpdate & Chr(34) & " /e /t /g " & Chr(34) & ParmToWhom & Chr(34) & ":" & parmType If Err.number <> 0 Then          ' File couldn't be copiedWscript.Echo "Failed." & vbcrlf     Else If err.number = 0 Thenwscript.echo "Successfull." & vbcrlf        End If End IfLoopWscript.quit 

Comments:
  • This is one more way of doing it..best part about this is both file ,folder orand regisrty permission can be managed by this
    http://www.itninja.com/blog/view/using-secedit-to-apply-security-templates - sumitsingh1984 10 years ago
 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ