Win32::Perm Usage for special permissions

From: Howard (howard_at_gei-tools.com)
Date: 07/13/04


Date: 13 Jul 2004 07:51:36 -0700

Hello all.

On a file or folder object in Windows 2000/2003, it is possible to
edit the standard Change, RW etc permissions and give "special"
permissions. These special permissions do things like allow/deny
"Create Folders/Append Data" and such.

What I am looking to do is use a script that I have that walks a
directory to set permissions on a specific subfolder that is found 4-6
levels deep (depending on where it is located) for one group where
they will have access to read and modify files but not create a
subdirectory. According to a Microsoft KB article, this requires
setting the permission on each folder individually. Since there are
over 5000 folders, I'd like to do it programmatically.

What I don't know, though, is can Win32::Perm (or any other module,
for that matter) set the granular permissions that 2000/2003 offer. I
want to remove the "Create Folders/Append Data" right on these
folders, but leave read ad write access, as per this KB article.

So, is it possible, and if so, any ideas on what the function would
be?

Any help would be GREATLY appreciated.

Thank you.

Howard



Relevant Pages

  • Re: HDD SECURITY
    ... Which likely would have lead you down the path of "how to set permissions on ... files and folders" - and a search for that in the built in Windows XP Help ... To set, view, change, or remove file and folder permissions ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • RE: Windows 2003 Server - Everyone Group
    ... this folder only accessable by the users in the "special" group. ... Configure User and Group Access on an Intranet in Windows Server ... NTFS files system permissions control ... group that you want to set permissions for, click Check Names to verify the ...
    (microsoft.public.win2000.networking)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The fact that the tech support is based in India has nothing to do with the ... If so you may want to leave this folder alone. ... down to all children folders because i can set those permissions to ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The only computers i fix are my own. ... If so you may want to leave this folder alone. ... it includes all subdirectories with inherited permissions. ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)