Creating Directories without AUTO Parent Propagation?
Fern0
If the parent directory has any specific user settings .. then every folder
created below it
will have the inherit propagation checked off.
How can you avoid this ... Easy. The parent folder has to have " Everyone "
with full permissions ..
Then all new sub folders created below that folder will not have propagation
enabled ...
"Fern0" <fern...@altamira.com> wrote in message
news:Lg8L8.21066$Z6.2...@nnrp1.uunet.ca...
> I'm running a little DOS batch script in a windows2000
> environment to create directories with specific NTFs user
> rights. As you can see the below script first does as follows..
> (script at end of this message)
>
> Line1: Create the directory
> Line2: Edit permission .. adding a domain user rights.
> Line3: Edit permission .. adding administrators rights.
> Line4: Edit permission .. removing the "everyone" entry completly.
>
> The entire script is not attached below obviously but it
> does work fine. My problem is the check box which Allows inheritable
> permissions from Parent to propagate to this object is still
> highlighted on the individual directories created. This being a
> problem becuase the parent directory does have read permissions
> for everyone, and yes I want everyone to read/list the parent
> directory.
>
> Now the funny thing is that if you did this manually you would
> not be able to remove everyone user from this folder.. unless you
> remove the the check / propagate from parent option.. and then copy
> the NTFS permissions... then removing the everyone entry.
>
> The script will remove the everyone from theuser rights field, and
> yet the propagate check box is still checked. I noticed that the
> everyone entry will not appear unless the server is restarted.
>
> Some more information: If I use this script to target my personal
> 2000 workstation (eg. c:\home) the propagate check box is not checked
> which is perfect. But when I target a 2000 server (eg.
> \\servername\d$\home)
> The propagate option is checked. Note: the home directory on the
> server has identical permisions as the one on my C: drive. And yes
> I am a domain admin while running this script.
>
> Making a long story short.. Is there a way using CACLS or any other
> command to force NO allowance of the parent folder propagation while
> createing them with this script??
>
> Thanks alot .. I really hope there is someone out there that can help me.
>
> Please feel free to respond via email: fern...@altamira.com
>
>
> ---- Actual Script ----
> md %newdirectory%
> cacls %newdirectory% /e /g %1% %@domain% %:c%
> cacls %newdirectory% /e /g administrators%:f%
> cacls %newdirectory% /e /r everyone
> -----------------------
>
>