Change security on multiple folders at once
-
Monday, March 30, 2009 10:04 PMHello,
In Server 2003 we were able to select a handfull of folders, right-click, select properties, and modify the permissions on all of the folders using the Security tab. With Server 2008 if you select more than one folder and select properties you only get the General and Customize tabs. I've tried this on a couple 2008 servers with the same result. I've also tried unchecking the "Use Sharing Wizard" option to no avail.
If there is no way to re-enable the "Security" tab when multiple folders are selected, is there an easy alternative? I know we can script the process, but it doesn't happen very often, and we'd like to avoid scripting it.
Thanks in advance.- Changed Type bellferd Monday, July 26, 2010 7:17 PM No anwser possible
All Replies
-
Wednesday, April 01, 2009 1:00 AMModeratorHi,
You can write some scripts to leverage Icacls tool to modify permission of files or folders.
1. Create a bat file that contains the following command to collect folder list or manually create a dir.txt file that contains the names of the file or folders that you would like to configure.
@echo off
for /d %%i in (*) do @echo %%i >>dir.txt
pause
2. Create a bat file that contains the following contents to run icacls to configure permissions.
for /f "tokens=*" %A in (dir.txt) do icacls %A /grant user:F
Note: Replace file name (dir.txt) and user name, permission accordingly.
For more information about icacls, please refer to the following article:
Icacls
http://technet.microsoft.com/en-us/library/cc753525.aspx
Thanks.
This posting is provided "AS IS" with no warranties, and confers no rights.- Proposed As Answer by Brian Borg Wednesday, April 01, 2009 2:34 AM
- Marked As Answer by Mervyn ZhangModerator Tuesday, April 07, 2009 1:20 AM
- Unmarked As Answer by bellferd Tuesday, July 21, 2009 2:55 PM
- Unproposed As Answer by bellferd Tuesday, July 21, 2009 3:12 PM
-
Friday, April 03, 2009 2:40 PMSecurity permissions tabs will disappear on multiple selection IF you don't have correct permissions to just one of those selected. I have actually started using SubinACL to do multiple permissions as I find it hugely more flexible (Apologies if this is not a Microsoft approved tool)
-
Tuesday, July 21, 2009 3:09 PMMervyn,
Thanks for the replies, but that's not really what I was asking.
In Windows XP and Server 2003 we had the ability to select serveral files at once, then select the security tab. If the permissions are identical for all the files selected we were able to modify the permissions the same as if we had selected just one file. If we modified the permissions all of the selected files were updated. If the permissions on the selected files were different we would get a warning box that said "The permissions cannot be displayed because they are different between .........., do you wish to reset the permissions on all the selected items?" If we selected "Yes" it would set the permissions to the lowest common denominator, and we could modify the permissions for all the files at once.
I am aware of Icalcs and calcs, but when I'm trying to change permissions on 50 files with long file names it doesn't really help me if I need to type each name individually into a script, it would take all day!
(This is an example of a file name: CSWEA Abstract-Now is the Time for Serious Consideration of Adopting Wet Weather Water Quality Standards.doc)
In server 2003 I was able to select the files, change the permissions and be done in a minute or two. I'd just like to know how to re-enable this functionality in Windows 7/Server 2008.
-Justin
Nik,
I'll check out that app, thanks for the advice!
-Justin -
Wednesday, October 28, 2009 6:07 PMHi All,
I've noticed the same issue. Has anyone found a way to re-enable this or a way around this?
Thanks,
Paul -
Sunday, December 13, 2009 4:44 PM
There is a property sheet shell extension here that does the exact same thing as Windows' ACL editor: 'http://www.codeproject.com/KB/winsdk/accessctrl4.aspx?fid=193386&fr=1#xx0xx. Unfortunately it doesn't appear under Vista. If someone can make it work...
-
Thursday, May 20, 2010 1:42 PM
Appearantly there is no real answer, this was intentionally removed functionality. Microsoft claims that admins make too many mistakes and removing the ability to change security on multiple folders will make the consequences of those mistakes smaller (nevermind that this will generate more mistakes since we will have to do a lot more repetitive security changes).
The functionality was removed in the Vista/Windows 7/Server 2008 GUIs so my personal workaround is to do all security changes from a 2003 server or XP interface.
- Proposed As Answer by David Blanchard Thursday, May 20, 2010 1:43 PM
- Unproposed As Answer by bellferd Monday, July 26, 2010 6:58 PM
-
Monday, July 26, 2010 7:11 PM
Yeah, unfortuantely that's what we've been doing as well, but at some point we won't have any more xp, server 2003 machines. I guess the real awnser is that Microsoft givith, Microsoft taketh away.
Mr. Gates, Please give it back!
-
Wednesday, September 01, 2010 8:04 AM
Guys, have successfully been using SetACL for a while now. This allows me to add extra permissions without affect current permissions, remove permissions or change levels of existing permissions.
Just search for SetACL on t'internet and read up on it. Beware..Changing bulk permissions can be dangerous, hence MS removing that functionality. Ensure you have a backup of any data you are changing.
-
Thursday, March 31, 2011 1:09 PM
Is anyone here a developer who knows shell programming and C++? I know how to make the security tab appear for multiple items but I'm not a developer so I can't actually write the code. But I can help anyone willing to fix this issue with guidance on how I think it can be done.
Anonymuos
.png)
