Changing many NTFS ACLs - Is there a faster way?

Discussion in 'Active Directory' started by Jim Garrison, Oct 12, 2006.

  1. Jim Garrison

    Jim Garrison Guest

    I need to restructure NTFS permissions on a disk containing
    on the order of 10^7 files. Changing ACLs from the Windows
    GUI takes a very long time, probably because it's writing
    every single filename to the screen.

    Is there a faster way to make mass ACL changes? CACLS?
    Some other tool?
     
    Jim Garrison, Oct 12, 2006
    #1
    1. Advertisements

  2. Jim Garrison

    Jim Garrison Guest

    Can anyone answer the question without shilling for their
    product? Are there standard (i.e. ship with Windows) for
    doing mass permission changes?
     
    Jim Garrison, Oct 13, 2006
    #2
    1. Advertisements

  3. You have the options of

    1. cacls / xcacls

    2. Writing a script

    3. Writing an executable

    4. Searching the internet for tools that say they do it and test them.
    Such as SetACL.

    5. Buying something

    Regardless, this is going to be slow. That is a lot of files. Your
    fastest solution would be an application that was multithreaded so it
    could do several files at a time in parallel.

    Note that this group isn't about filesystems, it is about Active
    Directory which is an LDAP Directory. You may want to go post your
    question in one of the security groups as well.

    joe


    --
    Joe Richards Microsoft MVP Windows Server Directory Services
    Author of O'Reilly Active Directory Third Edition
    www.joeware.net


    ---O'Reilly Active Directory Third Edition now available---

    http://www.joeware.net/win/ad3e.htm
     
    Joe Richards [MVP], Oct 13, 2006
    #3
  4. To be fair to JP, you didn't indicate you were adverse to products in
    your initial post, you simply asked for alternate mechanisms.


    --
    Joe Richards Microsoft MVP Windows Server Directory Services
    Author of O'Reilly Active Directory Third Edition
    www.joeware.net


    ---O'Reilly Active Directory Third Edition now available---

    http://www.joeware.net/win/ad3e.htm
     
    Joe Richards [MVP], Oct 13, 2006
    #4
  5. Jim Garrison

    Jim Garrison Guest

    On rereading my reply to JP, I see it does come off as somewhat rude.
    My apologies.
     
    Jim Garrison, Oct 13, 2006
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.