subinacl - can't grant multiple permissions?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi:

I'm using subinacl (newest version) to modify the permissions for all the
printers on my network. It's worked perfectly for giving single permissions
to groups (i.e. either Full, or Manage, or Print), but I've run into a
problem with trying to give one group both the Print and Manage Documents
permissions.

This line works for me to grant a single permission on printer 1 to mygroup
(in this case, the Print permission):
subinacl /printer “\\myserver\printer 1" /grant=dom\mygroup=p
Click to expand...

According to the documentation, I should be able to add two permissions on
the same line like this:
subinacl /printer “\\myserver\printer 1" /grant=dom\mygroup=pm
Click to expand...
but when I try that, the command fails altogether. I've also tried granting
the Print permission, then running subinacl again to grant the Manage
Documents permission. When I do that, Print permission is removed and the
Manage Documents permission added.

How can I get both permissions added? Anyone know what I'm doing wrong?
Thanks for any help you can give.
 
I'm using subinacl (newest version) to modify the permissions for all the
printers on my network. It's worked perfectly for giving single permissions
to groups (i.e. either Full, or Manage, or Print), but I've run into a
problem with trying to give one group both the Print and Manage Documents
permissions.
Click to expand...

Well, unless you deny Print, Manage Documents includes
that so don't bother.
 
Unfortunately Manage Documents permission does not automatically include the
Print permission. I still have the problem.
 
R. Reuter said:
Unfortunately Manage Documents permission does not automatically include the
Print permission. I still have the problem.
Click to expand...

Must be an oddity of subinacl.exe.

Download SetAcl.exe (free) from Sourceforge.net.

It has the world's most irritatingly complex command
line but it will change more any permissions programatically.
 
Hi:

I'm using subinacl (newest version) to modify the permissions for all the
printers on my network. It's worked perfectly for giving single permissions
to groups (i.e. either Full, or Manage, or Print), but I've run into a
problem with trying to give one group both the Print and Manage Documents
permissions.

This line works for me to grant a single permission on printer 1 to mygroup
(in this case, the Print permission):

According to the documentation, I should be able to add two permissions on
the same line like this:
but when I try that, the command fails altogether. I've also tried granting
the Print permission, then running subinacl again to grant the Manage
Documents permission. When I do that, Print permission is removed and the
Manage Documents permission added.

How can I get both permissions added? Anyone know what I'm doing wrong?
Thanks for any help you can give.
Click to expand...
Have you tried:
subinacl /printer “\\myserver\printer 1" /grant=dom\mygroup=p /grant=dom\mygroup=m


Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
 
Yes, I tried that, but found that the second command replaced the permission
granted in the first, rather than adding to it.
 
SetACL did it! I was able to use the -ace parameter twice in the command line
and set the permissions I needed. Thank you for pointing me in the right
direction!
 
R. Reuter said:
SetACL did it! I was able to use the -ace parameter twice in the command line
and set the permissions I needed. Thank you for pointing me in the right
direction!
Click to expand...

Cool. Your welcome.

You don't seem to have had must trouble with the SetAcl
command syntax (but then again you might have worked on
this all night <grin>)
 
Back
Top