Icacls Permissions help

[deca300]

Hi guys

I have been looking all over and cant seem to find a good how to doc on Icacls.

I have used these URLs:

http://www.computerhope.com/icacls.htm

https://technet.microsoft.com/en-us/library/cc753525.aspx

But none of those explain what I actually need done.

I have a parent folder "Teams" with child folders "team A, Team B, Team C, Team D" Inside all of these team folders I have the same folder structure "Players, Sponsorship, finals, location"

What I want to achieve is run a script to only allow the security group "Players" to make changes to the changes folder. Only the "Sponsorship" security group to be able to make changes to the Sponsorship folder etc.

All of the users can ready all of the folders, but only in you are part of a certain security group can you make changes.

I would really appropriate if someone can help me with this or point me to "how to" docs so I can try figure it out?

Thank you

 

[deca300]

uopdate

 

[Cray]

How many Teams do you have? Does each team have their own Specific security group for players?

Assume you only want players from team A to change in the players folder for Team A? So you have 4 unique security groups for each team?

If you don't mind everyone having read access to all parts, the first thing you need to do is create your folder structure, assign read permissions to "everyone" or "domain users" and make sure inheritance is enabled and set to overwrite all child folders.

Once done you need to script the additional security group for each subsequent folder using ICACLS command (adding additional security). I have an example file at home I can look at this evening...

 

[Cray]

Okay, I remember why this stuff doesn't sound familiar. Have your looked at using xcacls?

https://support.microsoft.com/en-us/kb/318754

https://support.microsoft.com/en-us/kb/825751

So for adding the extra permissions to those folders you would use the syntax

xcacls d:\teamA\Players /g domain\TeamAPlayers:rw /y

Where TeamAPlayers is the security group name. You would then used similar entries for each subsequent folder. You will need one line for each subfolder...