grant a user rights to set rights for folders

Discussion in 'Active Directory' started by arno, May 23, 2005.

  1. arno

    arno Guest

    Hello,

    Win2k Terminal Server SP4

    when we open a new project one normal user ("UserA") creates with a
    batchfile a project folder with standard subfolders. some of these
    subfolders require special user rights (eg. allow only one group).

    How can I grant the rights to create the folders/subfolders and set
    access rights to "UserA" only?

    Please remember, that UserA runs a batchfile, editing (right click on
    the link on the desktop, edit) will show him eg. that cacls.exe is run.
    I tried to st userrights on the batchfile "only run", however, without
    rights to "read" the file it does not work - but then UserA can see
    what is in the file. Is there a way to set user rights to run a
    batchfile without beeing able to read it?

    Regards

    arno
     
    arno, May 23, 2005
    #1
    1. Advertisements

  2. You should set a special NTFS permissions to user read/change permissions on
    that path. You can do that using Windows Explorer
     
    Danilo Bordini [MVP], May 23, 2005
    #2
    1. Advertisements

  3. arno

    arno Guest

    Hi Danilo,
    I am using a batchfile to do this as this is a complex procedure. for
    the batchfile i need cacls.exe, right? so, I need read/execute
    permissions on cacls.exe, right? this is a security problem, right?

    regards
    arno
     
    arno, May 23, 2005
    #3
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.