icacls Problem, any Ideas ?

Posted: 09-24-2008, 07:53 AM
Hello ppl,

i want to replace a SID on a Network Share, its an EMC Cellerra Fileserver.
The SID belongs to a non existent local Group of a Computer, and shall be
replaced with the Domain Admins.
Now the Problem is: i can see the SID when i do a icacls . /save blabla /t eg:
D:AI(A;;FA;;;S-1-5-21-843271493-14817-88053947-544)(A;ID;FA;;;S-1-5-21-3293502084-2983367093-3279364434-3974)(A;ID;FA;;;DA)
../\gempc.doc
its the first SID.
Now i can do a search fo my own SID by Number:
icacls . /findSID *S-1-5-21-3293502084-2983367093-3279364434-3974 /t
and it is found. now i do a search for the SID to be replaced:
icacls ./ /findSID *S-1-5-21-843271493-14817-88053947-544 /t
Es wurde keine Dateien mit ├╝bereinstimmender SID gefunden. <-- none is found

how can that be ? what do i do wrong ? my own SID is inherited, the other is
added explcitely

thanks for hints

icacls Problem, any Ideas ?


Responses to "icacls Problem, any Ideas ?"

Kerry Brown
Guest
Posts: n/a
 
Re: icacls Problem, any Ideas ?
Posted: 09-24-2008, 01:49 PM
Why not just delete the permissions for the unknown SID then create the new
permissions for Domain Admins? It seems like you're trying to do something
that is overly complicated to achieve a simple goal.

--
Kerry Brown
MS-MVP - Windows Desktop Experience: Systems Administration
http://www.vistahelp.ca/phpBB2/
http://vistahelpca.blogspot.com/



"Schellhaas" <Schellhaas@discussions.microsoft.com> wrote in message
news:044FE54D-A038-43F9-8D26-3D11E0D75E42@microsoft.com...
> Hello ppl,
>
> i want to replace a SID on a Network Share, its an EMC Cellerra
> Fileserver.
> The SID belongs to a non existent local Group of a Computer, and shall be
> replaced with the Domain Admins.
> Now the Problem is: i can see the SID when i do a icacls . /save blabla /t
> eg:
> D:AI(A;;FA;;;S-1-5-21-843271493-14817-88053947-544)(A;ID;FA;;;S-1-5-21-3293502084-2983367093-3279364434-3974)(A;ID;FA;;;DA)
> ./\gempc.doc
> its the first SID.
> Now i can do a search fo my own SID by Number:
> icacls . /findSID *S-1-5-21-3293502084-2983367093-3279364434-3974 /t
> and it is found. now i do a search for the SID to be replaced:
> icacls ./ /findSID *S-1-5-21-843271493-14817-88053947-544 /t
> Es wurde keine Dateien mit ├╝bereinstimmender SID gefunden. <-- none is
> found
>
> how can that be ? what do i do wrong ? my own SID is inherited, the other
> is
> added explcitely
>
> thanks for hints
Schellhaas
Guest
Posts: n/a
 
Re: icacls Problem, any Ideas ?
Posted: 09-24-2008, 02:12 PM
Well i have those SIDs in various locations. Only the Share for users
homefolders has >700k folders alone. If i would know icacls could search and
replace this SID i would give icacls like 2 Days of work.....
Kerry Brown
Guest
Posts: n/a
 
Re: icacls Problem, any Ideas ?
Posted: 09-24-2008, 02:40 PM
Subinacl may be able to do this.

http://www.microsoft.com/downloads/d...displaylang=en

--
Kerry Brown
MS-MVP - Windows Desktop Experience: Systems Administration
http://www.vistahelp.ca/phpBB2/
http://vistahelpca.blogspot.com/




"Schellhaas" <Schellhaas@discussions.microsoft.com> wrote in message
news:3498B7A8-2F22-4314-8402-111879D308C5@microsoft.com...
> Well i have those SIDs in various locations. Only the Share for users
> homefolders has >700k folders alone. If i would know icacls could search
> and
> replace this SID i would give icacls like 2 Days of work.....
 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to use icacls.exe to fully enable users to subfolders/files Tom Windows Vista Security 5 01-30-2008 03:49 AM
Grant permission using ICACLS antigravity Windows Vista File Management 0 08-14-2007 02:40 AM
Set rights with Icacls Beat Windows Vista Administration 5 07-13-2007 02:05 PM
Network Problem - need ideas Wayne Newcomb Windows XP Accessibility 2 03-03-2005 01:35 AM
Any more ideas on the DV,SP2, Firewire problem?? DMW Windows XP Video 2 02-11-2005 07:25 PM