Using XCACLS.vbs to modify ACL's on FOLDERS only

[blake]

Also put this on Technet, but here goes

I've tried all combinations of flags I can think of and cannot get XCACLS.vbs doing what I want, let me explain...

What I am wanting to do is traverse all subdirectories and add a group to folders only, as I am going to make the assumption that files are not blocking inheritance and so do not require anything explicit on their ACL. This is mainly to save time and disk writes due to the huge volume of folders I'm planning on running the script against.

My latest attempt is (powershell):

>> cscript XCACLS.vbs $fpath /S /T /E /G $($group+":;LC") /L xcacls.log /DEBUG

Does anyone have any ideas?

Thanks in advance

Blake

[cluberti]

I don't know if xcacls can do just folders, as the /T option does folders *and* files. I believe you would be looking for a tool to go above and beyond the Windows tools, like Security Explorer, which can do this sort of thing.