SUBINACL problem

  • Thread starter Thread starter JustMe@Home
  • Start date Start date
J

JustMe@Home

Hello,

When I revoke John's acl's with this command:

SubInAcl.exe /subdirec=filesonly "\\machine\F$\dir\*.txt"
/revoke=mydomain\john

And then add Read permissions for John with this command:

SubInAcl.exe /subdirec=filesonly "\\machine\F$\dir\*.txt"
/grant=mydomain\john=R

Then John appears to have Read&Execute rights instead of Read.

I used the /grant=R because I do not want John to have Read&Execute
rights. If I wanted that, I would have used /grant=E.

Does anybody know how I can grant Read permissions only? (Not
Read&Execute)

Any suggestions to this group are *higly* appreciated!
TIA!!
 
Hello,

When I revoke John's acl's with this command:

SubInAcl.exe /subdirec=filesonly "\\machine\F$\dir\*.txt"
/revoke=mydomain\john

And then add Read permissions for John with this command:

SubInAcl.exe /subdirec=filesonly "\\machine\F$\dir\*.txt"
/grant=mydomain\john=R

Then John appears to have Read&Execute rights instead of Read.

I used the /grant=R because I do not want John to have Read&Execute
rights. If I wanted that, I would have used /grant=E.

Does anybody know how I can grant Read permissions only? (Not
Read&Execute)

Any suggestions to this group are *higly* appreciated!
TIA!!


See if the version from tip 6705 in the 'Tips & Tricks' at http://www.jsiinc.com
works correctly.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
Hi Jerold,

Thank you for thr tip. It took me to the Windows Server 2003 Resource
Kit Tools download page. After installing, there is no difference:
/GRANT=R does what /GRANT=E should do.

Does anybody know how I can grant Read permissions only? (Not
Read&Execute)

Any suggestions to this group are *higly* appreciated!
TIA!!

---
 
Try XCACLS, tip 5171 in the 'Tips & Tricks' at http://www.jsiinc.com


Hi Jerold,

Thank you for thr tip. It took me to the Windows Server 2003 Resource
Kit Tools download page. After installing, there is no difference:
/GRANT=R does what /GRANT=E should do.

Does anybody know how I can grant Read permissions only? (Not
Read&Execute)

Any suggestions to this group are *higly* appreciated!
TIA!!


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
Hi Jerold,

Xcacls seems to solve the prob! With this tool it is possible to grant
Read permissions *without* setting the Read&Execute permissions too.

Thank you for your contributions!
 
Back
Top