Changing many NTFS ACLs - Is there a faster way?

I need to restructure NTFS permissions on a disk containing
on the order of 10^7 files. Changing ACLs from the Windows
GUI takes a very long time, probably because it's writing
every single filename to the screen.

Is there a faster way to make mass ACL changes? CACLS?
Some other tool?

 

Can anyone answer the question without shilling for their
product? Are there standard (i.e. ship with Windows) for
doing mass permission changes?

 

You have the options of

1. cacls / xcacls

2. Writing a script

3. Writing an executable

4. Searching the internet for tools that say they do it and test them.
Such as SetACL.

5. Buying something

Regardless, this is going to be slow. That is a lot of files. Your
fastest solution would be an application that was multithreaded so it
could do several files at a time in parallel.

Note that this group isn't about filesystems, it is about Active
Directory which is an LDAP Directory. You may want to go post your
question in one of the security groups as well.

joe


--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

 

To be fair to JP, you didn't indicate you were adverse to products in
your initial post, you simply asked for alternate mechanisms.


--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

 

On rereading my reply to JP, I see it does come off as somewhat rude.
My apologies.