XCACLS causes error in permissions  
Author Message
Jupiter





PostPosted: Fri Jun 18 06:46:12 CDT 2004 Top

Windows XP Security >> XCACLS causes error in permissions After using xcacls from the resource kit to change permissions on a
folder and its contents, explorer reports an error on the permissions.
This happens in XP as well as Win2000.

[Xcacls should be the same as cacls, with the exception of an added
"/Y" switch to make it easier to use from a batch file].

What I did was grant access to one account, and revoke (deny) it for
another:

xcacls <path> /T /E /G User1:F /Y
xcacls <path> /T /E /D User2 /Y

After executing these commands through wshShell.Run in a script,
opening the security tab in the folder's properties (or any item
within it) causes this message to appear:

The permissions on <name> are incorrectly ordered, which may cause
some entries to be ineffective. Press OK to continue and sort the
permissions correctly, or Cancel to reset the permissions.


Clicking OK or Cancel >>seems<< to do what the message says, but the
changes aren't saved when the properties dialog is closed: the same
error reappears the next time the security tab is opened.

Windows XP1090  
 
 
Lucvdv





PostPosted: Fri Jun 18 06:46:12 CDT 2004 Top

Windows XP Security >> XCACLS causes error in permissions On Fri, 18 Jun 2004 13:40:26 +0200, Lucvdv <EMail@HideDomain.com>
wrote:

> After using xcacls from the resource kit to change permissions on a
> folder and its contents, explorer reports an error on the permissions.
> This happens in XP as well as Win2000.

Minor correction: xcacls is part of the support tools, not the resouce
kit. It can also be downloaded:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/xcacls-o.asp


 
 
Brendon





PostPosted: Fri Jun 18 07:19:36 CDT 2004 Top

Windows XP Security >> XCACLS causes error in permissions XCACLS.EXE is poked for Windows.

You need XCACLS.VBS:
http://support.microsoft.com/?id=825751

Phone Microsoft Product Support Services, mention this article by number and
they will send you the tool free of charge.

"Lucvdv" <EMail@HideDomain.com> wrote in message
news:EMail@HideDomain.com...
> After using xcacls from the resource kit to change permissions on a
> folder and its contents, explorer reports an error on the permissions.
> This happens in XP as well as Win2000.
>
> [Xcacls should be the same as cacls, with the exception of an added
> "/Y" switch to make it easier to use from a batch file].
>
> What I did was grant access to one account, and revoke (deny) it for
> another:
>
> xcacls <path> /T /E /G User1:F /Y
> xcacls <path> /T /E /D User2 /Y
>
> After executing these commands through wshShell.Run in a script,
> opening the security tab in the folder's properties (or any item
> within it) causes this message to appear:
>
> The permissions on <name> are incorrectly ordered, which may cause
> some entries to be ineffective. Press OK to continue and sort the
> permissions correctly, or Cancel to reset the permissions.
>
>
> Clicking OK or Cancel >>seems<< to do what the message says, but the
> changes aren't saved when the properties dialog is closed: the same
> error reappears the next time the security tab is opened.
>


 
 
Brendon





PostPosted: Fri Jun 18 07:26:31 CDT 2004 Top

Windows XP Security >> XCACLS causes error in permissions I meant poked for Windows 2000.

"Brendon Rogers" <EMail@HideDomain.com> wrote in message
news:EMail@HideDomain.com...
> XCACLS.EXE is poked for Windows.
>
> You need XCACLS.VBS:
> http://support.microsoft.com/?id=825751
>
> Phone Microsoft Product Support Services, mention this article by number
and
> they will send you the tool free of charge.
>
> "Lucvdv" <EMail@HideDomain.com> wrote in message
> news:EMail@HideDomain.com...
> > After using xcacls from the resource kit to change permissions on a
> > folder and its contents, explorer reports an error on the permissions.
> > This happens in XP as well as Win2000.
> >
> > [Xcacls should be the same as cacls, with the exception of an added
> > "/Y" switch to make it easier to use from a batch file].
> >
> > What I did was grant access to one account, and revoke (deny) it for
> > another:
> >
> > xcacls <path> /T /E /G User1:F /Y
> > xcacls <path> /T /E /D User2 /Y
> >
> > After executing these commands through wshShell.Run in a script,
> > opening the security tab in the folder's properties (or any item
> > within it) causes this message to appear:
> >
> > The permissions on <name> are incorrectly ordered, which may cause
> > some entries to be ineffective. Press OK to continue and sort the
> > permissions correctly, or Cancel to reset the permissions.
> >
> >
> > Clicking OK or Cancel >>seems<< to do what the message says, but the
> > changes aren't saved when the properties dialog is closed: the same
> > error reappears the next time the security tab is opened.
> >
>
>


 
 
Torgeir





PostPosted: Sun Jun 20 18:27:26 CDT 2004 Top

Windows XP Security >> XCACLS causes error in permissions Lucvdv wrote:

> After using xcacls from the resource kit to change permissions on a
> folder and its contents, explorer reports an error on the permissions.
> This happens in XP as well as Win2000.
>
> [Xcacls should be the same as cacls, with the exception of an added
> "/Y" switch to make it easier to use from a batch file].
>
> What I did was grant access to one account, and revoke (deny) it for
> another:
>
> xcacls <path> /T /E /G User1:F /Y
> xcacls <path> /T /E /D User2 /Y
>
> After executing these commands through wshShell.Run in a script,
> opening the security tab in the folder's properties (or any item
> within it) causes this message to appear:
>
> The permissions on <name> are incorrectly ordered, which may cause
> some entries to be ineffective. Press OK to continue and sort the
> permissions correctly, or Cancel to reset the permissions.
Hi

An alternative that works better:

SetACL.exe (freeware) at
http://setacl.sourceforge.net/

SetACL can set permissions on:

Local or remote directories
Local or remote files
Local or remote printers
Local or remote registry keys
Local or remote Win32 services
Local or remote network shares


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/community/scriptcenter/default.mspx