RE: SUBINACL never seems to return to a prompt
Not EVERYTHING. Otherwise I'd only have ONE blog post. J But hey - it worked for you, didn't it?!? Regards, Michael B. Smith MCITP:SA,EMA/MCSE/Exchange MVP http://TheEssentialExchange.com From: Webster [mailto:[EMAIL PROTECTED] Sent: Monday, September 08, 2008 2:48 PM To: NT System Admin Issues Subject: RE: SUBINACL never seems to return to a prompt From: Michael B. Smith [mailto:[EMAIL PROTECTED] Subject: RE: SUBINACL never seems to return to a prompt . I suspect you aren't waiting long enough. grin, but that is your answer to EVERYTHING! J At least you didn't tell him to wait 2 hours! Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SUBINACL never seems to return to a prompt
Or reboot three times Whoa! My mouse just moved! Love that video... - Andy O. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SUBINACL never seems to return to a prompt
Michael B. Smith [EMAIL PROTECTED] wrote on 09/08/2008 01:54:59 PM: Takes about 10 minutes to process locally. I suspect you aren?t waiting long enough. So here's another test. Apparently, SubInACL enumerates everything it finds, so the more files/sub-directories, the longer it takes: On another directory I am testing, there are 4 (main) sub-directories, 590M in files. This is a user's home folder, and re-directed My Documents. Took 6 min, 16 seconds, just to display: Z:\PHA ScriptsSubInACL /subdirectories \\server\users\username /DISPLAY == +File \\server\users\username == /control=0x0 /owner =domain\username /primary group =domain\domain users /audit ace count =0 /perm. ace count =2 /pace =pha.phila.gov\adamsneACCESS_ALLOWED_ACE_TYPE-0x0 CONTAINER_INHERIT_ACE-0x2 OBJECT_INHERIT_ACE-0x1 Type of access: Special acccess : -Read -Write -Execute -Delete -Change Permissions -Take Ownership Detailed Access Flags : FILE_READ_DATA-0x1 FILE_WRITE_DATA-0x2 FILE_APPEND_DATA-0x4 FILE_READ_EA-0x8FILE_WRITE_EA-0x10 FILE_EXECUTE-0x20 FILE_DELETE_CHILD-0x40 FILE_READ_ATTRIBUTES-0x80 FILE_WRITE_ATTRIBUTES-0x100 DELETE-0x1 READ_CONTROL-0x2 WRITE_DAC-0x4 WRITE_OWNER-0x8 SYNCHRONIZE-0x10 /pace =builtin\administrators ACCESS_ALLOWED_ACE_TYPE-0x0 CONTAINER_INHERIT_ACE-0x2 OBJECT_INHERIT_ACE-0x1 Type of access: Special acccess : -Read -Write -Execute -Delete -Change Permissions -Take Ownership Detailed Access Flags : FILE_READ_DATA-0x1 FILE_WRITE_DATA-0x2 FILE_APPEND_DATA-0x4 FILE_READ_EA-0x8FILE_WRITE_EA-0x10 FILE_EXECUTE-0x20 FILE_DELETE_CHILD-0x40 FILE_READ_ATTRIBUTES-0x80 FILE_WRITE_ATTRIBUTES-0x100 DELETE-0x1 READ_CONTROL-0x2 WRITE_DAC-0x4 WRITE_OWNER-0x8 SYNCHRONIZE-0x10 Elapsed Time: 00 00:06:16 Done:1, Modified0, Failed0, Syntax errors0 Last Done : \\server\users\username --- dir \\server\users\username /s Total Files Listed: 633 File(s)618,748,445 bytes 143 Dir(s) 236,880,056,320 bytes free --- That's ... going to make using this tool for displaying or taking ownership impractical, especially across a network. And my script won't run correctly on a Win2000 server (I've tried it). SIGH Need to hammer things out a bit more, I think ... ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: SUBINACL never seems to return to a prompt
I've always found fileacl to be a bit more reliable than subinacl is now...I think the comment earlier on about broken versions of subinacl is dead right 2008/9/9 [EMAIL PROTECTED] Michael B. Smith [EMAIL PROTECTED] wrote on 09/08/2008 01:54:59 PM: Takes about 10 minutes to process locally. I suspect you aren't waiting long enough. So here's another test. Apparently, SubInACL enumerates everything it finds, so the more files/sub-directories, the longer it takes: On another directory I am testing, there are 4 (main) sub-directories, 590M in files. This is a user's home folder, and re-directed My Documents. Took 6 min, 16 seconds, just to display: Z:\PHA ScriptsSubInACL /subdirectories \\server\users\username /DISPLAY == +File \\server\users\username == /control=0x0 /owner =domain\username /primary group =domain\domain users /audit ace count =0 /perm. ace count =2 /pace =pha.phila.gov\adamsneACCESS_ALLOWED_ACE_TYPE-0x0 CONTAINER_INHERIT_ACE-0x2 OBJECT_INHERIT_ACE-0x1 Type of access: Special acccess : -Read -Write -Execute -Delete -Change Permissions -Take Ownership Detailed Access Flags : FILE_READ_DATA-0x1 FILE_WRITE_DATA-0x2 FILE_APPEND_DATA-0x4 FILE_READ_EA-0x8FILE_WRITE_EA-0x10 FILE_EXECUTE-0x20FILE_DELETE_CHILD-0x40 FILE_READ_ATTRIBUTES-0x80 FILE_WRITE_ATTRIBUTES-0x100 DELETE-0x1 READ_CONTROL-0x2 WRITE_DAC-0x4 WRITE_OWNER-0x8 SYNCHRONIZE-0x10 /pace =builtin\administrators ACCESS_ALLOWED_ACE_TYPE-0x0 CONTAINER_INHERIT_ACE-0x2 OBJECT_INHERIT_ACE-0x1 Type of access: Special acccess : -Read -Write -Execute -Delete -Change Permissions -Take Ownership Detailed Access Flags : FILE_READ_DATA-0x1 FILE_WRITE_DATA-0x2 FILE_APPEND_DATA-0x4 FILE_READ_EA-0x8FILE_WRITE_EA-0x10 FILE_EXECUTE-0x20FILE_DELETE_CHILD-0x40 FILE_READ_ATTRIBUTES-0x80 FILE_WRITE_ATTRIBUTES-0x100 DELETE-0x1 READ_CONTROL-0x2 WRITE_DAC-0x4 WRITE_OWNER-0x8 SYNCHRONIZE-0x10 Elapsed Time: 00 00:06:16 Done:1, Modified0, Failed0, Syntax errors0 Last Done : \\server\users\username --- dir \\server\users\username /s Total Files Listed: 633 File(s)618,748,445 bytes 143 Dir(s) 236,880,056,320 bytes free --- That's ... going to make using this tool for displaying or taking ownership impractical, especially across a network. And my script won't run correctly on a Win2000 server (I've tried it). SIGH Need to hammer things out a bit more, I think ... ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: SUBINACL never seems to return to a prompt
James Rankin [EMAIL PROTECTED] wrote on 09/09/2008 09:51:23 AM: I've always found fileacl to be a bit more reliable than subinacl is now...I think the comment earlier on about broken versions of subinacl is dead right Perhaps. But this is the latest version of SubInACL; I have verified (twice) that I have downloaded the latest and supposedly non-broken version. I'll go poking around FileACL, then. Thanks. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: SUBINACL never seems to return to a prompt
Fileacl has a premier place in my toolbox. Love it. On Tue, Sep 9, 2008 at 6:51 AM, James Rankin [EMAIL PROTECTED] wrote: I've always found fileacl to be a bit more reliable than subinacl is now...I think the comment earlier on about broken versions of subinacl is dead right 2008/9/9 [EMAIL PROTECTED] Michael B. Smith [EMAIL PROTECTED] wrote on 09/08/2008 01:54:59 PM: Takes about 10 minutes to process locally. I suspect you aren't waiting long enough. So here's another test. Apparently, SubInACL enumerates everything it finds, so the more files/sub-directories, the longer it takes: On another directory I am testing, there are 4 (main) sub-directories, 590M in files. This is a user's home folder, and re-directed My Documents. Took 6 min, 16 seconds, just to display: Z:\PHA ScriptsSubInACL /subdirectories \\server\users\username /DISPLAY == +File \\server\users\username == /control=0x0 /owner =domain\username /primary group =domain\domain users /audit ace count =0 /perm. ace count =2 /pace =pha.phila.gov\adamsneACCESS_ALLOWED_ACE_TYPE-0x0 CONTAINER_INHERIT_ACE-0x2 OBJECT_INHERIT_ACE-0x1 Type of access: Special acccess : -Read -Write -Execute -Delete -Change Permissions -Take Ownership Detailed Access Flags : FILE_READ_DATA-0x1 FILE_WRITE_DATA-0x2 FILE_APPEND_DATA-0x4 FILE_READ_EA-0x8FILE_WRITE_EA-0x10 FILE_EXECUTE-0x20FILE_DELETE_CHILD-0x40 FILE_READ_ATTRIBUTES-0x80 FILE_WRITE_ATTRIBUTES-0x100 DELETE-0x1 READ_CONTROL-0x2 WRITE_DAC-0x4 WRITE_OWNER-0x8 SYNCHRONIZE-0x10 /pace =builtin\administrators ACCESS_ALLOWED_ACE_TYPE-0x0 CONTAINER_INHERIT_ACE-0x2 OBJECT_INHERIT_ACE-0x1 Type of access: Special acccess : -Read -Write -Execute -Delete -Change Permissions -Take Ownership Detailed Access Flags : FILE_READ_DATA-0x1 FILE_WRITE_DATA-0x2 FILE_APPEND_DATA-0x4 FILE_READ_EA-0x8FILE_WRITE_EA-0x10 FILE_EXECUTE-0x20FILE_DELETE_CHILD-0x40 FILE_READ_ATTRIBUTES-0x80 FILE_WRITE_ATTRIBUTES-0x100 DELETE-0x1 READ_CONTROL-0x2 WRITE_DAC-0x4 WRITE_OWNER-0x8 SYNCHRONIZE-0x10 Elapsed Time: 00 00:06:16 Done:1, Modified0, Failed0, Syntax errors0 Last Done : \\server\users\username --- dir \\server\users\username /s Total Files Listed: 633 File(s)618,748,445 bytes 143 Dir(s) 236,880,056,320 bytes free --- That's ... going to make using this tool for displaying or taking ownership impractical, especially across a network. And my script won't run correctly on a Win2000 server (I've tried it). SIGH Need to hammer things out a bit more, I think ... ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SUBINACL never seems to return to a prompt - MORE
[EMAIL PROTECTED] wrote on 09/09/2008 09:15:29 AM: Michael B. Smith [EMAIL PROTECTED] wrote on 09/08/2008 01:54:59 PM: Takes about 10 minutes to process locally. I suspect you aren?t waiting long enough. So here's another test. Apparently, SubInACL enumerates everything it finds, so the more files/sub-directories, the longer it takes: On another directory I am testing, there are 4 (main) sub- directories, 590M in files. This is a user's home folder, and re- directed My Documents. Took 6 min, 16 seconds, just to display: And why? because I didn't say *.*, apparently ... Z:\PHA ScriptsSubInACL /subdirectories \\server\users\username /DISPLAY SNIP Elapsed Time: 00 00:06:16 Done:1, Modified0, Failed0, Syntax errors 0 And now: subinacl.exe /subdirectories \\server\users\username\*.* /display=owner SNIP Elapsed Time: 00 00:00:06 Done: 697, Modified0, Failed0, Syntax errors0 So 6 minutes, down to 6 seconds, is quite an improvement, I think ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SUBINACL never seems to return to a prompt
Did you download the latest subinacl from Microsoft.com/downloads? The one in the support tools and resource kit is broken. Regards, Michael B. Smith MCITP:SA,EMA/MCSE/Exchange MVP http://TheEssentialExchange.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, September 08, 2008 12:58 PM To: NT System Admin Issues Subject: SUBINACL never seems to return to a prompt Further to my post about scripting .. I've been advised to use SUBINACL, rather than XCACLS.VBS. But that, too, isn't returning to a prompt == Z:\subinacl.exe /subdirectories \\server\users\user /display=owner +File \\server\users\user /owner =domain\user Signal CTRL_C_EVENT received. SubInAcl is stopping ... Elapsed Time: 00 00:01:28 Done:1, Modified0, Failed0, Syntax errors0 Last Done : \\server\users\user == I have to CTRL-C back to a prompt. It's as if it is waiting for me to tell it to do (i.e., modify) something, yet I am specifying /display=owner. I want to just have it display owner to start, so I can see that the rest of the selection logic is working, before I tell it /setowner=builtin\administrators. Can anyone assist? Am I just misunderstanding what SUBINACL does? Can it not just display? Thanks -- Michael Leone Network Administrator, ISM Philadelphia Housing Authority 2500 Jackson St Philadelphia, PA 19145 Tel: 215-684-4180 Cell: 215-252-0143 mailto:[EMAIL PROTECTED] ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SUBINACL never seems to return to a prompt
Michael B. Smith [EMAIL PROTECTED] wrote on 09/08/2008 01:18:04 PM: Did you download the latest subinacl from Microsoft.com/downloads? The one in the support tools and resource kit is broken. Should be. The .exe says 6/11/2004 ... I can try downloading again, I suppose Z:\PHA Scriptssubinacl.exe /? SubInAcl version 5.2.3790.1180 That's the latest, I think ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SUBINACL never seems to return to a prompt
Yes, it is the most recent, but why did you strip your problem description? I will have to go to the web to see it again. Regards, Michael B. Smith MCITP:SA,EMA/MCSE/Exchange MVP http://TheEssentialExchange.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, September 08, 2008 1:41 PM To: NT System Admin Issues Subject: RE: SUBINACL never seems to return to a prompt Michael B. Smith [EMAIL PROTECTED] wrote on 09/08/2008 01:18:04 PM: Did you download the latest subinacl from Microsoft.com/downloads? The one in the support tools and resource kit is broken. Should be. The .exe says 6/11/2004 ... I can try downloading again, I suppose Z:\PHA Scriptssubinacl.exe /? SubInAcl version 5.2.3790.1180 That's the latest, I think ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SUBINACL never seems to return to a prompt
Michael B. Smith [EMAIL PROTECTED] wrote on 09/08/2008 01:46:14 PM: Yes, it is the most recent, but why did you strip your problem description? I always strip out the parts of the email that aren't necessarily concerned with my comments in a specific email. I will include the description again: == Z:\subinacl.exe /subdirectories \\server\users\user /display=owner +File \\server\users\user /owner =domain\user Signal CTRL_C_EVENT received. SubInAcl is stopping ... Elapsed Time: 00 00:01:28 Done:1, Modified0, Failed0, Syntax errors0 Last Done : \\server\users\user == I have to CTRL-C back to a prompt. It's as if it is waiting for me to tell it to do (i.e., modify) something, yet I am specifying /display=owner. I want to just have it display owner to start, so I can see that the rest of the selection logic is working, before I tell it /setowner=builtin\administrators. Can anyone assist? Am I just misunderstanding what SUBINACL does? Can it not just display? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SUBINACL never seems to return to a prompt
Takes about 10 minutes to process locally. I suspect you aren't waiting long enough. Regards, Michael B. Smith MCITP:SA,EMA/MCSE/Exchange MVP http://TheEssentialExchange.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, September 08, 2008 12:58 PM To: NT System Admin Issues Subject: SUBINACL never seems to return to a prompt Further to my post about scripting .. I've been advised to use SUBINACL, rather than XCACLS.VBS. But that, too, isn't returning to a prompt == Z:\subinacl.exe /subdirectories \\server\users\user /display=owner +File \\server\users\user /owner =domain\user Signal CTRL_C_EVENT received. SubInAcl is stopping ... Elapsed Time: 00 00:01:28 Done:1, Modified0, Failed0, Syntax errors0 Last Done : \\server\users\user == I have to CTRL-C back to a prompt. It's as if it is waiting for me to tell it to do (i.e., modify) something, yet I am specifying /display=owner. I want to just have it display owner to start, so I can see that the rest of the selection logic is working, before I tell it /setowner=builtin\administrators. Can anyone assist? Am I just misunderstanding what SUBINACL does? Can it not just display? Thanks -- Michael Leone Network Administrator, ISM Philadelphia Housing Authority 2500 Jackson St Philadelphia, PA 19145 Tel: 215-684-4180 Cell: 215-252-0143 mailto:[EMAIL PROTECTED] ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SUBINACL never seems to return to a prompt
From: Michael B. Smith [mailto:[EMAIL PROTECTED] Subject: RE: SUBINACL never seems to return to a prompt . I suspect you aren't waiting long enough. grin, but that is your answer to EVERYTHING! J At least you didn't tell him to wait 2 hours! Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SUBINACL never seems to return to a prompt
Or reboot three times... Whoa! My mouse just moved! Shook From: Webster [mailto:[EMAIL PROTECTED] Sent: Monday, September 08, 2008 2:48 PM To: NT System Admin Issues Subject: RE: SUBINACL never seems to return to a prompt From: Michael B. Smith [mailto:[EMAIL PROTECTED] Subject: RE: SUBINACL never seems to return to a prompt ... I suspect you aren't waiting long enough. grin, but that is your answer to EVERYTHING! :) At least you didn't tell him to wait 2 hours! Webster ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: SUBINACL never seems to return to a prompt
Michael B. Smith [EMAIL PROTECTED] wrote on 09/08/2008 01:54:59 PM: Takes about 10 minutes to process locally. I suspect you aren?t waiting long enough. Really? 10 minutes for 1 directory? Just to display ownership? I have a few dozen folders I need to eventually take ownership of, and move to somewhere else. That'll take forever ... I may have to rethink doing it in a script. I think you can feed SubInACL a file full of folders names to work on ... perhaps I'll write the affected list of folders; start SubInACL on that list .. and come back tomorrow. :-) I did notice that specifying /file made it return immediately: = subinacl.exe /file \\server\users\username /display=owner +File \\server\users\username /owner =domain\username Elapsed Time: 00 00:00:00 Done:1, Modified0, Failed0, Syntax errors0 Last Done : \\server\users\username Z:\PHA Scriptssubinacl.exe /file \\server\users\username /display == +File \\server\users\username == /control=0x0 /owner =domain\username /primary group =domain\domain users /audit ace count =0 /perm. ace count =2 /pace =domain\usernameACCESS_ALLOWED_ACE_TYPE-0x0 CONTAINER_INHERIT_ACE-0x2 OBJECT_INHERIT_ACE-0x1 Type of access: Special acccess : -Read -Write -Execute -Delete -Change Permissions -Take Ownership Detailed Access Flags : FILE_READ_DATA-0x1 FILE_WRITE_DATA-0x2 FILE_APPEND_DATA-0x4 FILE_READ_EA-0x8FILE_WRITE_EA-0x10 FILE_EXECUTE-0x20 FILE_DELETE_CHILD-0x40 FILE_READ_ATTRIBUTES-0x80 FILE_WRITE_ATTRIBUTES-0x100 DELETE-0x1 READ_CONTROL-0x2 WRITE_DAC-0x4 WRITE_OWNER-0x8 SYNCHRONIZE-0x10 /pace =builtin\administrators ACCESS_ALLOWED_ACE_TYPE-0x0 CONTAINER_INHERIT_ACE-0x2 OBJECT_INHERIT_ACE-0x1 Type of access: Special acccess : -Read -Write -Execute -Delete -Change Permissions -Take Ownership Detailed Access Flags : FILE_READ_DATA-0x1 FILE_WRITE_DATA-0x2 FILE_APPEND_DATA-0x4 FILE_READ_EA-0x8FILE_WRITE_EA-0x10 FILE_EXECUTE-0x20 FILE_DELETE_CHILD-0x40 FILE_READ_ATTRIBUTES-0x80 FILE_WRITE_ATTRIBUTES-0x100 DELETE-0x1 READ_CONTROL-0x2 WRITE_DAC-0x4 WRITE_OWNER-0x8 SYNCHRONIZE-0x10 Elapsed Time: 00 00:00:00 Done:1, Modified0, Failed0, Syntax errors0 Last Done : \\server\users\username Perhaps it's a matter of using /file when referring to the subdirectory itself, as opposed to the subdirectory and all it's contents? ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
