Windows ACL
in [Windows Servers]
|
Prev: Windows server 2008 R2 freezes
Next: Server Authentication Certificate Error for Remote Desktop Connection
From: Zeno on 16 Jan 2010 11:47 Hi, I have a quick question on Windows ACL I need some assistance on. We just did a restore of about 900GB of data from our File Servers and after the restore when we tried to create some files/folder in the restored directory we got an error about "unsorted permissions...." I can't remember the exact message. In the past I have encountered this error before and its mainly because the ACLs for the directory haven't been re-enumerated and what we'd do is make a change at the top-level directory so it re- calculates all the ACLs again and it would resort the ACLs. But what I'd like to know is other this way is there any tool/commands that can actually used to do this eg. something like xcacls or icacls can be used to run a command and resort the ACLs. many thanks
From: Pegasus [MVP] on 16 Jan 2010 12:52 "Zeno" <momo2804(a)gmail.com> said this in news item news:2f36b382-4460-4c1d-b011-d65a1aae1bd6(a)a32g2000yqm.googlegroups.com... > Hi, > > I have a quick question on Windows ACL I need some assistance on. We > just did a restore of about 900GB of data from our File Servers and > after the restore when we tried to create some files/folder in the > restored directory we got an error about "unsorted permissions...." I > can't remember the exact message. > > In the past I have encountered this error before and its mainly > because the ACLs for the directory haven't been re-enumerated and what > we'd do is make a change at the top-level directory so it re- > calculates all the ACLs again and it would resort the ACLs. > > But what I'd like to know is other this way is there any tool/commands > that can actually used to do this eg. something like xcacls or icacls > can be used to run a command and resort the ACLs. > > many thanks You can use cacls.exe to restore (not resort!) ACLs. If you want more flexibility then xcacls.vbs might be suitable (http://download.microsoft.com/download/f/7/8/f786aaf3-a37b-45ab-b0a2-8c8c18bbf483/xcacls_installer.exe).
From: Zeno on 17 Jan 2010 11:38
Pegasus, Actually the problem is the "permissions" are there its just there unsorted eg. when we try and view the permissions in it displays a message like the permissions are "unsorted or something like that I can't remember..." and we get the option to tick OK or Cancel. If we click OK it will reorganise the permissions correctly otherwise if we press Cancel the permissions aren't resorted and if we create some files or folders underneath that folder then the inheritance doesn't work properly. So what we normally do is modify the directory at the very root folder so it initiates a change throughout the complete directory structure and resorts the permissions. I've also found this problem occurs if we use "xcacls" to change a whole lot of permissions on a directory after the xcacls command the permissions are sort of in an unsorted state and what we need to do is tweak the permissions at the root folder so that it refreshses all the permissions. But with the release of "icacls" this issue was resolved. The problem we are having is because we are restoring over 1.5TBs of data and after the restore we get this issue. So I'm looking for anything we can run scripts/commands to resolve this issue. Cheers |