KNBase

User Rights and User Groups

Disclaimer

In this section we put together all kinds of information that we find useful in our daily work. The material is a collection of information from various sources including bulletin boards, mailgroups, manuals, magazines, books, seminar handouts and independent research.

This information is provided without warranty of any kind. There is no further support available. Each individual must determine the applicability and accuracy of this information to their specific environment.

User Rights

There is a few ways to set file permissions in Windows/NT. The normal ways is to use Explorer of File Manager. When we do unattendes setups this is not a recomended method. You want to use a script!

CACLS.EXE

Microsoft provide a program called CACLS.EXE that can be used to manipulate file permissions from the command line. It allows You to set no permission, read persmission, change permission or full permission.

We have had some problem with the Swedish version of cacls.exe that lives on the Windows/NT CD-rom with. It gives us strange messages without any logical explanation. We will recommend the use of a cacls.exe from the English version of Windows/NT. We use the one delivered with SP2.

Keep in mind that You reference a local group with BUILTIN.
BUILTIN\Administrator referens the local administrator.

The program uses ASCII and not ANSI! Check if using international charachters like Å, Ä, Ö!

ShareWare

There is also shareware that seems to work. Look at ftp://ftp.netcom.com/pub/wo/woodardk/. More tools can be found at http://www.evinet.com/mdd. We have not tested them yet....

User Groups

In Windows/NT Workstation resource Kit there is a program called usrtogrp.exe. It can be used to add members to a user group.

The sybtax is:

   usrtogrp <filename>

Where <filename> is the name of a file containing information as follows...

   DOMAIN: thisdomain
   LOCALGROUP: Administrators
   First User
   Second User

The local machine is refered by Localmachine as a domain name.

Observ:
For users or groups containing international characters keep in mind that this program uses ANSI and not ASCII as a lot of others.