Windows Server 2008 R2 – Giving local administrator full rights to all folders

permissionswindowswindows-server-2008

Is there a quick way to give the local administrator full rights to all folders on the C drive? I am having really hard time with that, I try to give it full rights to some folders (user profiles) but I can't even modify the NTFS permissions in some cases, I get "permission denied"

Is there some soft of tutorial or script that will just give the administrator full rights on all folders in the C driver?

Many thanks for your help!
Toast

Best Answer

You need to first set the owner to "Administrators" and then in a second step you can change the permissions. If you want to automate that or set permissions from the command line SetACL might be the tool of choice. Examples follow.

Setting the owner of an entire tree to administrators and enabling inheritance on the child objects:

SetACL.exe -on "C:\" -ot file -actn setprot -op "dacl:np;sacl:nc" 
           -rec cont_obj -actn setowner -ownr "n:S-1-5-32-544;s:y"

Adding full permissions for administrators:

SetACL.exe -on "C:\" -ot file -actn ace -ace "n:S-1-5-32-544;s:y;p:full"