by lasty12 at 2013-01-21 12:38:30
Hi allby DonJ at 2013-01-21 16:01:11
I am trying to apply all “users” of a machine modify permissions to an entire directory using the following script, but the permissions only appear to apply to the files within:
[code2=powershell]icacls “c:\program files\folder” /T /C /grant users]
Can anyone please tell me where I am going wrong?
That’s what /t does - “all specified files in [not on] the current directory and its subdirectories.” Looking at the syntax (http://technet.microsoft.com/en-us/libr … 0%29.aspx; I don’t use Icacls much myself), I don’t see where it’d run differently.by nohandle at 2013-01-22 00:48:31
I usually use this in cmd:by lasty12 at 2013-01-23 11:26:09
icacls “c:\program files\folder” /grant users:(OI)(CI)M- the OI stands for Object Inheritance and the CI for Container Inheritance. If I am correct setting inherited permissions on the top folder is better than setting the permissions on every file separately.
In PowerShell it does not run by default part of the command needs to be escaped. For more information about running the command with ease refer to my article here: http://www.powershellmagazine.com/2013/ … owershell/
Thanks for your responses, nohandle, I found the solution very similar to your suggestion as below - including " " around the user and parameters:by nohandle at 2013-01-23 12:19:58
[code2=powershell]icacls “c:\program files\folder*” /Grant "Users]
Hi lasty, I am glad you figured it out.by lasty12 at 2013-01-23 13:55:30
Btw do you intent to set the permission to all folders named foldersomething or just one folder named folder? I am pointing to the asterisk wildcard.
@nohandle; there are a few ‘folders’ prefixed by “folder” (name changed for post) so my logic to adding the * was to cover all of these eventualities. Does this sound like the correct thing to do?by nohandle at 2013-01-23 14:30:55
Yes sure, just asking if you use it for a reason.