XCACLS.VBS

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Does anyone have a copy of the VBScript that extends the
capability of XCACLS.EXE?

I need to set explicit deny special access permissions
across several hundred directories, and I'd like to do it
through a batch file, but the EXE version only allows you
to GRANT special access, the VBS allows you to DENY it.

I'd greatly appreciate it!

You can send it to keith.wiedemann [AT] digitalnet.com

(make sure to modify the extension so it doesn't get
stripped)

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

I don't have it but you may also want to take a look at fileacl which has a /D switch
for deny permissions. --- Steve

http://www.microsoft.com/downloads/details.aspx?FamilyID=723f64ea-34f0-4e6d-9a72-004d35de4e64&displaylang=en
http://membres.lycos.fr/jfb/gb/gbtools/fileacl.htm

"Keith Wiedemann" <anonymous@discussions.microsoft.com> wrote in message
news:20c2201c45944$490ddcf0$a001280a@phx.gbl...
> Does anyone have a copy of the VBScript that extends the
> capability of XCACLS.EXE?
>
> I need to set explicit deny special access permissions
> across several hundred directories, and I'd like to do it
> through a batch file, but the EXE version only allows you
> to GRANT special access, the VBS allows you to DENY it.
>
> I'd greatly appreciate it!
>
> You can send it to keith.wiedemann [AT] digitalnet.com
>
> (make sure to modify the extension so it doesn't get
> stripped)

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Keith,

Subinacl is a great tool to use to grant or deny users permissions to a
particular folder in the filesystem. You can download it at the following
location:

http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-
93cf-ed6985e3927b&displaylang=en

Hope that helps!

Steve Dodson [MSFT]
PSS Security
MCSE, CISSP

--

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this
message are best directed to the newsgroup/thread from which they
originated.
--------------------
>Content-Class: urn:content-classes:message
>From: "Keith Wiedemann" <anonymous@discussions.microsoft.com>
>Sender: "Keith Wiedemann" <anonymous@discussions.microsoft.com>
>Subject: XCACLS.VBS
>Date: Wed, 23 Jun 2004 10:05:29 -0700
>Lines: 14
>Message-ID: <20c2201c45944$490ddcf0$a001280a@phx.gbl>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="iso-8859-1"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
>Thread-Index: AcRZREkNJ/BX2z14SA+hHjtXgioaAA==
>Newsgroups: microsoft.public.win2000.security
>Path: cpmsftngxa10.phx.gbl
>Xref: cpmsftngxa10.phx.gbl microsoft.public.win2000.security:28652
>NNTP-Posting-Host: tk2msftngxa08.phx.gbl 10.40.1.160
>X-Tomcat-NG: microsoft.public.win2000.security
>
>Does anyone have a copy of the VBScript that extends the
>capability of XCACLS.EXE?
>
>I need to set explicit deny special access permissions
>across several hundred directories, and I'd like to do it
>through a batch file, but the EXE version only allows you
>to GRANT special access, the VBS allows you to DENY it.
>
>I'd greatly appreciate it!
>
>You can send it to keith.wiedemann [AT] digitalnet.com
>
>(make sure to modify the extension so it doesn't get
>stripped)
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Keith Wiedemann wrote:

> Does anyone have a copy of the VBScript that extends the
> capability of XCACLS.EXE?
>
> I need to set explicit deny special access permissions
> across several hundred directories, and I'd like to do it
> through a batch file, but the EXE version only allows you
> to GRANT special access, the VBS allows you to DENY it.
>
> I'd greatly appreciate it!
>
> You can send it to keith.wiedemann [AT] digitalnet.com
>
> (make sure to modify the extension so it doesn't get
> stripped)
Hi

An alternative that works better:

SetACL.exe (freeware) at
http://setacl.sourceforge.net/

SetACL can set permissions on:

Local or remote directories
Local or remote files
Local or remote printers
Local or remote registry keys
Local or remote Win32 services
Local or remote network shares


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/community/scriptcenter/default.mspx