User Folder Permission Settings

[yihwen]

I have got about few 100 folders that I need to modify the permission. Currently users are connected to

\\server\users\%username%

They folders have been given full control for both the %username% as well as the Domain Admins.

I would like to remove the full control permission for the %username% on each folder.

Is there a script or tool that I can run on the \\server\users directory, so that I can remove just the full control permission on the %username%?

The folder is mapped to the user logon name on the Win 2003 Active Directory.

[tguy]

Try the resource kit utility CACLS.EXE.

Here is a short synopsis.

Cacls filename [/T] [/E] [/C] [/G user:perm] [/R user [...]] [/P user:perm [...]] [/D user [...]]

filename Displays ACLs.

/T Changes ACLs of specified files in the current directory and all subdirectoriies.

/E Edits ACL instead of replacing it.

/C Continues on access denied errors.

/G user:perm Grants specified user access rights. Perm can be: R Read W Write C Change (write) F Full control

/R user Revokes specified user's access rights (valid only with /E).

/P user:perm Replaces specified user's access rights. Perm can be: N None R Read W Write C Change (write) F Full control

/D user Denies specified user access.