Scripting premissions on a harddrive?

[preben]

Okey, this is a hard one. I've been googeling for hours now, with no solution.

Through my guide on partitioning RIS (http://www.websikkerhet.com/ris-partitioning.html?⊂=85), I've created a secondary partition. However, that partition does not set any rights for "everyone", or "authenticated users". So, domain users cannot access the drive.

Any idea how I can script premissions, like;

Everyone, Read & Write

Thanks!

/Preben

[tommyp]

cacls is a nice script/dos utility to change permissions.

[preben]

yeah I know .., but I'm not able to make it work by setting the user "everyone" with full rights. Do you have any examples ?

[brainstane]

cacls C:\folder\subfolder /t /e /g "everyone":f

would give "everyone" full permission to the subfolder.

Make sure you enclose user groups that contain spaces (i.e domain users) in " " at the end of the command.

If you want, you can also team this up with the "net share" command and create a share prior to implementing permissions. I use this to share a program installation folder:

net share Apps=d:\programs\apps /grant:Everyone,full

followed by the cacls command:

cacls d:\programs\apps /t /e /g "domain users":f

Note, the net share command above is 2003 specific. If you do not use the /grant:everyone,full it will default the share to read only. This does not happen in windows XP.

Edited June 20, 2006 by brainstane

[preben]

Thanks ! Worked like a charm, even on a harddrives root

/Preben