kretmatt
Content Type
Profiles
Forums
Events
Posts posted by kretmatt
-
-
I DID IT!
I found a freeware tool called SetACL.exe.
With this you can just do what I want.
You can set every check for allow and deny, without overwriting the other ones.
I called
SetACL.exe -on "M:\ZBSCAN" -ot file -actn ace -ace n:dpag_admin;p:read_ex;m:grant
to set the three checks for allow read, execute
and
SetACL.exe -on "M:\ZBSCAN" -ot file -actn ace -ace n:dpag_admin;p:write;m:deny
to set the one check for deny write.
That is all I want!
Thanks for your help!
Matze
0 -
Hi!
Yes, you are right.
CACLS M:\ZBSCAN /G dpag_admin:Rwill replace all ACLs, and about that dpag_admin is only allowd to read. But, that is not what I want. I just want to change the authority of this folder for the user dpag_admin.
I do this with the /E switch.
CACLS M:\ZBSCAN /E /G dpag_admin:RAnd if I don´t explicit deny the writing for him, he gets the rights from the Users group, and is allowed to write.
So please, I know what I have to set. I just need to know HOW I can do it.
allow reading
deny writing
There must be a way! Can´t believe that I am the only one with this problem!
Thanks for your efforts, guys!
Matze
0 -
Hi nmX.Memnoch
Thanks for your reply.
But!
If you're only granting read permissions then you don't need to deny write permissions.Thats not true, I think!
If you do not explicit deny writing, the user is able to write in that folder.
I am not sure if the user can change files, but he is able to create files and folders.
Don´t ask me why! I do not understand why there are a allow and a deny column, at all.
In my oppinion it´s like you said. If some thing is not allowed it is denied.
But it seems, Microsoft has another concept for this!
With your code I got the problem again. I only had allowed reading, but I do not deny writing.
Isn´t there any way to set this little checks!?!?
Please! Can somebody help me?!
Thanks!
0 -
Thanks nmX.Memnoch
but I allready tryed XCACLS.EXE.
I was unable to set deny settings with this tool.
Can you give me a hint how to do this?
Thanks
0 -
Hi!
I just want to do a really easy thing. I want to change the permissions of a folder for a user to the following:
allow reading
deny writing
I can do this very simple from the properties dialog of the folder, but I want to do it from the commandline.
I tryed to use SubInACL.exe like this.
subinacl.exe /file M:\ZBSCAN /grant=dpag_admin=r
everything seems fine.
but than i call
subinacl.exe /file M:\ZBSCAN /deny=dpag_admin=w
to ADD the write deny, but it is not added, it replaces my first grant call.
About that after the two calls the permissions only setted to deny writing.
I allready tryed to turn the order, but then I only get the allow reading setted.
I also tryed to use only one command like
subinacl.exe /file M:\ZBSCAN /grant=dpag_admin=r /deny=dpag_admin=w
but nothing works.
Can please somebody help my!
Thank you very much in advanced!
Matze
0 -
Hi xochipilli!
I had the same problem. I think some USB sticks do not fit with some motherboards usb legacy support.
I tried to install a FSC Computer unattended from dvd and a FSC USB stick. Every thing went fine. Then, one day, I forgot my stick and I tryed another one, with the same Computer, the same DVD and the same unattend.xml. Nothing happens. The installation did not find the unattend.xml and stops at the very first installation-dialog.
Sorry, can´t give you any help, but this hint.
Regards,
Matze
0 -
Hi!
folks, please post Unattend Questions in the unattended forums!SORRY!!!
kretmatt where the AutoUnattend.xml is located?AutoUnattend.xml is located on a USB stick! It will be used, because a lot of dialogs are not displayed (ProductKey, LanguageSettings,...).
These are "dead" tags:The "dead" gadget tags are because I tryed to disable the sidebar by remove all gadget pathes under Microsoft-Windows-Sidebar.
When I remove these I got these dead tags. If i leave them on default (%PROGRAMFILES%\windows sidebar\gadgets\SlideShow.gadget,true) I got no tags in the xml.
???
Don't use <SkipMachineOOBE> on true, if you try to create an user account in oobe pass. Remove the <SkipMachineOOBE> tag completly and do all the settings, described here.I tryed this allready and did all the things you linked on TechNet, but nothing works.
BTW, what kind of Vista DVD do you have?I use a OEM DVD. Could this cause problems?
@FireGeier:
Sollten unsere Unterhaltung auf eine Forum beschränken. Ich wäre für windows-unattended.de, aber wir können auch hier weiter machen.
Thanks to all!
0 -
I came to learn that installing unattended only works from boot, not when installing/upgrading from within windows (by use of autorun/setup). Not sure if you are running into the same issue. I also believe the next beta of vLite might contain unattended options, maybe if you wait for this a bit and try it from that it will work (then you can compare differences in the unattended file).
Thanks, but I install from boot, not from within windows!
Do you have any news about when the next vLite beta will be available?
0 -
Hi,
I am trying to install vista business completely unattended. I do not want any dialogs, I just would like to see the desktop at the end of the installation.
I allready created a AutoUnattend.xml and installed with this, but my installation allways stops at "creat user", "set security" and "set time".
I tryied so much things. With SkipMachineOOBE, without SkipMachineOOBE, with only one user account (instead of four, I need at the end),....
Can please somebody review my AutoUnattend.xml and give me a hint?
Another thing is that all my settings for the layout are not working.
I would like to disable the sidebar (why is these thing anabled by default on a BUSINESS installation???), set the theme and the startmenu to classic and also do not want the UserOOBE.
Nothing of these settings themes to work.
Here is my file:
<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="windowsPE">
<component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<SetupUILanguage>
<UILanguage>de-DE</UILanguage>
<WillShowUI>OnError</WillShowUI>
</SetupUILanguage>
<UILanguage>en-US</UILanguage>
<InputLocale>0407:00000407</InputLocale>
<SystemLocale>de-DE</SystemLocale>
<UserLocale>de-DE</UserLocale>
</component>
<component name="Microsoft-Windows-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<ImageInstall>
<OSImage>
<InstallFrom>
<MetaData wcm:action="add">
<Key>/IMAGE/NAME</Key>
<Value>Windows Vista BUSINESS</Value>
</MetaData>
</InstallFrom>
<InstallToAvailablePartition>false</InstallToAvailablePartition>
<WillShowUI>OnError</WillShowUI>
<InstallTo>
<DiskID>0</DiskID>
<PartitionID>1</PartitionID>
</InstallTo>
</OSImage>
</ImageInstall>
<UserData>
<ProductKey>
<WillShowUI>OnError</WillShowUI>
<Key>XXXX-XXXX-XXXX-XXXX-XXXX</Key>
</ProductKey>
<AcceptEula>true</AcceptEula>
<FullName>PZ</FullName>
<Organization>DPAG</Organization>
</UserData>
<DiskConfiguration>
<Disk wcm:action="add">
<CreatePartitions>
<CreatePartition wcm:action="add">
<Order>1</Order>
<Size>30000</Size>
<Type>Primary</Type>
</CreatePartition>
<CreatePartition wcm:action="add">
<Extend>true</Extend>
<Order>3</Order>
<Type>Primary</Type>
</CreatePartition>
<CreatePartition wcm:action="add">
<Extend>false</Extend>
<Order>2</Order>
<Type>Primary</Type>
<Size>10000</Size>
</CreatePartition>
</CreatePartitions>
<ModifyPartitions>
<ModifyPartition wcm:action="add">
<Active>true</Active>
<Extend>false</Extend>
<Format>NTFS</Format>
<Label>System</Label>
<Letter>C</Letter>
<Order>1</Order>
<PartitionID>1</PartitionID>
</ModifyPartition>
<ModifyPartition wcm:action="add">
<Active>false</Active>
<Extend>false</Extend>
<Format>NTFS</Format>
<Label></Label>
<Letter>E</Letter>
<Order>2</Order>
<PartitionID>2</PartitionID>
</ModifyPartition>
<ModifyPartition wcm:action="add">
<Active>false</Active>
<Extend>false</Extend>
<Format>NTFS</Format>
<Letter>M</Letter>
<Order>3</Order>
<PartitionID>3</PartitionID>
</ModifyPartition>
</ModifyPartitions>
<DiskID>0</DiskID>
<WillWipeDisk>true</WillWipeDisk>
</Disk>
<WillShowUI>OnError</WillShowUI>
</DiskConfiguration>
</component>
</settings>
<settings pass="oobeSystem">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<TimeZone>W. Europe Standard Time</TimeZone>
<UserAccounts>
<LocalAccounts>
<LocalAccount wcm:action="add">
<Password>
<Value>ZgB6AGQAZQB2AG0AdQBjAGgAMgAyAFAAYQBzAHMAdwBvAHIAZAA=</Value>
<PlainText>false</PlainText>
</Password>
<DisplayName>e3service</DisplayName>
<Group>Administrators</Group>
<Name>e3service</Name>
<Description>e3service</Description>
</LocalAccount>
</LocalAccounts>
<AdministratorPassword>
<Value>dABlAHMAdAAwADAAQQBkAG0AaQBuAGkAcwB0AHIAYQB0AG8AcgBQAGEAcwBzAHcAbwByAGQA</Value>
<PlainText>false</PlainText>
</AdministratorPassword>
</UserAccounts>
<StartPanelOff>true</StartPanelOff>
<Themes>
<DefaultThemesOff>true</DefaultThemesOff>
<CustomDefaultThemeFile>C:\Windows\Resources\Themes\Windows Classic.theme</CustomDefaultThemeFile>
</Themes>
<OOBE>
<HideEULAPage>true</HideEULAPage>
<NetworkLocation>Work</NetworkLocation>
<ProtectYourPC>3</ProtectYourPC>
<SkipUserOOBE>true</SkipUserOOBE>
</OOBE>
<AutoLogon>
<Password>
<Value>dABlAHMAdAAwADAAUABhAHMAcwB3AG8AcgBkAA==</Value>
<PlainText>false</PlainText>
</Password>
<Enabled>true</Enabled>
<LogonCount>5</LogonCount>
<Username>Administrator</Username>
</AutoLogon>
</component>
<component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<InputLocale>0407:00000407</InputLocale>
<SystemLocale>de-DE</SystemLocale>
<UserLocale>de-DE</UserLocale>
<UILanguage>en-US</UILanguage>
</component>
<component name="Microsoft-Windows-Sidebar" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<SidebarOnByDefault>false</SidebarOnByDefault>
<Gadget1 />
<Gadget2 />
<Gadget3 />
</component>
</settings>
<settings pass="specialize">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<ComputerName>Z0000PC</ComputerName>
</component>
</settings>
<cpi:offlineImage cpi:source="wim:d:/vista/vista_business_dvd/sources/install.wim#Windows Vista BUSINESS" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
</unattend>Thank you very much
0
Usage of SubInACL.exe Please Help
in Windows XP
Posted
Yes!
???
What are you trying to tell me?
I just want to make changes to one user, not to all, just to set one check!