OK; So I want to run through an existing folder structure and lock down a folder while keeping the subordinate folders modifiable by the majority of users.
E.G. I have a set of project folders numbered ‘001’, ‘002’, ’003’, etc. Under that, I have subfolders named ‘Docs’, ‘Dwgs’, etc. but at this level there also might be additional folders; ’Invoices’, ‘PDFs’, and so on. Currently, ‘Everyone’ has R/W permissions at the ‘PROJECTS’ folder level (which contains the numbered projects folders) and permissions get inherited down through the dir structure. Occasionally – meaning ‘often’, somebody will fat-finger a project folder into a neighboring folder and hilarity will not ensue. I want to lock the ‘001’ ‘002’ level so that users can browse those folders but not make any mods at that level. I also want to lock the next level so they can’t add additional folders or docs inside the ‘001’ folders. Once they get into the next level of folders; ‘Docs’, ‘Dwgs’ etc, I don’t care what they do. They can make folders, write and delete documents to their hearts’ content, but they can’t maul the top level structure.
This is my desire; how do I write an ‘icacls’ string to do that?
Once I have that piece of code, I have geeks here who can build me a robot to grind through the drive and apply it to all of the project folders.
Thanks, Gordon McKeever