Wednesday, June 1, 2011

Domain admins full access

C:\>icacls * /grant "Domain Admins":(OI)(CI)F /c /t

I don't know if it's just me, but my NTFS rights tend to get screwed up a lot. Sometimes the Domain Admins group loses rights to files, among other issues. Previously, I would use:

C:\>cacls * /e /g "Domain Admins":F /c /t

to accomplish this, but I started running into problems with the 255-character limit on path names. (Why people think they have to nest their folders so deep is beyond me.)

No comments:

Post a Comment