Search Windows and Linux Networking

Saturday, November 22, 2008

Changing NTFS permission command line using fileacl

FILEACL is an win32 console free software by Guillaume Bordier.

Download Fileacl.exe from http://www.gbordier.com/gbtools/fileacl.asp
After download copy or install fileacl.exe .

I have copy in c: (c drive). Then go to command prompt.

For showing changes I create folder
Md root
Default permission of root for user is Read , list folder,and execute like

To change users permission to add write access

Syntax
flieacl /s (set ACL)or/d (Deny ACL) user/Group:/FRWEP


C:\>fileacl c:\root /s users:/W

To inherit permissions give switch /INHERIT and to protect from inheritance give /PROTECT

For More information About flieacl go to http://www.gbordier.com/gbtools/fileacl.asp

Saturday, November 8, 2008

Allow Non admin user to change Time/Time Zone for Windows

By default only power user and administrator has Right to change windows time setting normal user get errer when changing the time setting. to allow Normal user to change windows time administrator need to give them permission to allow user to change system time by gpedit.msc , secpol.msc or windows resourece tool kit rktool.exe by command line
start> run>gpedit.msc>local computer police >computer configuration > windows setting >security setting>local police>User Right Assinmgnet >Change system time. Duble click on change system time and add user or group that you want to give permision.For command line you need to download rktool.exe from
http://www.microsoft.com/downloads/details.aspx?FamilyID=9D467A69-57FF-4AE7-96EE-B18C4790CFFD&displaylang=en
OR from
http://www.petri.co.il/download_windows_2003_reskit_tools.htm
after install rktool.exe go to start > All Programs> windows resource kit Tool > command shell. Here type ntrights +r SeSystemtimePrivilege -u "Users" (Note: It is case sensitive)
This will give privilege to change system time. But if you have domain then it is better to give non admin user to change time zone privilege because if user change time then domain is not allow him to login in to domain so it better give the user to change time zone setting. for so create new GPO and add following registry key in path computer Configuration >Windows Settings>Secrity settings>Registry. Right click registry and select add key>machin>system>curentcontrolset> control >TimezonInformation> Ok > Select Users and give full Control> Ok > Replace exitstence perminsions on all subkey> OK This will give permision to change Time Zone to the users.


Following are the topic link you may interested :-

1) Windows Active Directory.
2) Creating Multiple Users in Active Directory using excel file and VbScirpt.
3) Search (find) user in Active directory with First and Last Name using VbScirpt.
4) Export all users in Excel file from Active Directory. 
5) Update or Modify Users information in Active Directory from Excel file.