• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

2003 Script help/Request?

T

tjwenger

Weaksauce
Joined
Sep 20, 2009
Messages
123
Hey Guys,

I'm in need of a little guidance here.

@ work we are in the middle of a domain migration, and the ADMT tool failed us miserably. We have to add the new domain user permissions to user shares and right now, since I'm low man on the totem pole, its about to become my manual project process.

I've tried working with XCALCS to script these permission adds, but my scripting is worse than kiddie level.

Here is what I want the script to do:

If folder "X" is named "xyz" then add "xzy@newdomain.local" Read, write, Modify to folder "X", if "xyz@newdomain.local" does not exist, resume next.

Move on to next folder.

I need this to ADD the user permissions, and not take any away.

OR, even better would be:

IF SID on folder x = xyz@olddomain.local, then add xyz@newdomain.local to that folder with identical permissions. if xyz@newdomain.local does not exist, resume next.

(of course, moving through every user on the folder, as well as moving through all the folders)

That ay I could use it on any folder and migrate permissions. But All Ireally want is help with the first one. Could someone point me in the right direction? I've searched high and low, and I know this has got to be possible..

Thanks ahead of time, any help/Advice is appreciatted!
 
I ventured down that road, But XCALCS seems to be the right tool, as I already have a folder/Permission listing.

The problem is I don't know how to script it to keep moving. setACL works great, I just need it to pull the preexisting variables from the current permissions.
 
You could use two scripts, one to pull the current permission information and output it to a tmp file.

Then have a batch process run to look in that temp file for the information you need.

I wrote this awhile back, just forgot how i did it, and don't think i have the files anymore
 
Thats was I've focused on today. I've used "switchright" to pull current user, domain, and SID info into a csv. Now since the user = folder name, I need a script to inject the "user"@newdomain to the"user" folder.
 
Interesting. I've never seen autoit before, it helps quite a bit. For the record, I ran out of time on the script, and ended up doing it manually. Thanks for all the help though gang.
 
Just for the future, xcacls.exe has some bugs with doing acls adds. MS released a vbscript based replacement that works properly, xcaclcs.vbs. It actually processes things correctly.
 
You must log in or register to reply here.
Back
Top