Script to reorder ACLs in Windows server 2008

access-control-listwindows-server-2008

I have ran a tool called admnalow.exe that re-grants access to the local administrators (BUILTIN\Administrators) group for all directories and subdirectories in a given path. The problem is it seems to have caused the ACL's to be ordered improperly. I've been looking everywhere and have been unable to find a .vbs or any other script that will parse through a set of directories and reorder the ACLs. This can be done manually but would be incomprehensible for thousands of directories.

Can anyone help?!?!

Best Answer

The built-in icacls command with the /verify argument will do what you're looking for. Add the /T argument to make it apply to files and subdirectories.

Related Solutions

What’s the difference between Windows Server 2008, 2008 SP2 and 2008 R2

Windows Server 2008 and Windows Server 2008 SP2 are the same operating system, just at a different service pack level (Windows Server 2008 started at the SP1 level because it was released quite a bit after Windows Vista and SP1 was already out).

Windows Server 2008 R2 is the server release of Windows 7, so it's version 6.1 of the O.S.; it introduces quite a lot of new features, because it's actually a new release of the system. This is a good place to start: http://www.microsoft.com/windowsserver2008/en/us/whats-new.aspx.

There are also differences at the GUI level, because WS2008R2 uses the same new GUI introduced with Windows 7 (new taskbar, etc.).

Depending on what kind of applications you're developing, they may or may not encounter problems on different O.S. releases; you should definitely check MSDN.

The single most important point: Windows Server 2008 R2 exists only for 64-bit platforms, there's no x86 version anymore.

Windows – icacls, Network Service, and setting ACLs on Windows Server 2008

This line worked for me:

icacls testdir /grant "NT AUTHORITY\NetworkService":(OI)(M)

and

icacls testdir /grant "NT AUTHORITY\NetworkService":(CI)(M)

Update: And this too:

icacls testdir /grant "NT AUTHORITY\NetworkService":(OI)(CI)(M)

Best Answer

Related Solutions

What’s the difference between Windows Server 2008, 2008 SP2 and 2008 R2

Windows – icacls, Network Service, and setting ACLs on Windows Server 2008

Related Topic