Click to See Complete Forum and Search --> : Need to add domain admins thoughout folder and all subs


j_plough
January 2nd, 2002, 08:49 AM
I need to add domain admins to a folder and all sub folders below it. I cant get calcs to work I get a message that no mapping between account names and security ids was done?any ideas?

Kiddtek
January 2nd, 2002, 06:06 PM
You can change the permissions on the folder by going to it's properties and then Security (assuming it's NTFS). Change the permissions accoringly. You can also use the check box to apply the permissions to all the sub folders. What is "calcs"?

Martin Bordley
January 5th, 2002, 08:54 AM
I found this issue on users home drives where they had full control and decided to remove the local admins out.
Depends upon how many folders you need to do it to.
for a single folder and sub directories :-
i) Note permissions on folder.
ii) On local server take ownership of folder.
iii) Reset permissions to required permissions.

For an entire server eg home drives can be a little more difficult, ours luckily had the home folders named same as user name.
Here's what I did :-
i) I got a directory listing in dos into a txt file.
ii) Opened in excel and entered the appropriate xcacls command line entries for each folder, and saved as a csv.
iii) edited the csv in the dos txt editor and removed the commas, and saved as a batch file.
iv) Took ownership of all users home folders on server.
v) ran batch file to reset permissions.

Took me about 1 hour downtime to do a server of 400 users.
Got a 900 user server next week should be fun!!

NB I performed these on the server itself, as taking ownership of locked dirs over network produced 'parameter incorrect' and 'access denied' despite being full admin on that server.

Hope this helps.

Martin.