Also put this on Technet, but here goes I've tried all combinations of flags I can think of and cannot get XCACLS.vbs doing what I want, let me explain... What I am wanting to do is traverse all subdirectories and add a group to folders only, as I am going to make the assumption that files are not blocking inheritance and so do not require anything explicit on their ACL. This is mainly to save time and disk writes due to the huge volume of folders I'm planning on running the script against. My latest attempt is (powershell): >> cscript XCACLS.vbs $fpath /S /T /E /G $($group+":;LC") /L xcacls.log /DEBUG Does anyone have any ideas? Thanks in advance Blake