I concur with inheirtance down the tree of directories. Ran into same type of issues in past lives as a admin due to the broken inheirtenance.
Ed On Jan 26, 2016 3:04 PM, "Eugene Lipsky" <elip...@gmail.com> wrote: > I have a fileshare that I'd like to add a new security group to and give > it full admin rights to all the subfolders/files without changing any of > the existing permissions. So far I've been attempting to do this via the > following icacls command: > > icacls "\\fileserver\ShareA\*" /grant DOMAIN\FullAdmins:(OI)(CI)(F) /T > > My issue is that a lot of the folders and subfolders (hundreds, multiple > levels deep) have inheritance disabled and so permissions do not propagate > down to those folders and their subfolders requiring running the same > command on the level of those folders. I'm sure others have run into > similar situation and I'm guessing may have developed scripts to parse all > subfolders in a share with inheritance disabled to run a command against. > If anyone has something handy or other suggestions besides having to > re-design the fileshare I'd appreciate it. > > > Thanks, > Eugene >
