Hi there, Currently we have a Departments directory which needs to have all its permission changed from various users Read, Modify etc. to have everyone to Read Only permission. The actual changing permission isn't that hard if all I was needed to do was change everyone's permission to "Read Only" all I need to do is at the share folder change the Security permission to "read" and then populate all the permission to subfolders and files then it'd be fine. However the issue is this share folder has been around for some time and the historical ACL settings aren't quite setup in the best way. As a start at the share folder default most users have "modify" however then beneath that folder there's like a few hundred folders and some folders users have read and others have modify, then there's some users at that have only been given "list folder only" permission at various levels to ensure they only see some of the data. What I was thinking was to export the ACL using something like Icacls/Xcacls and then tune ACLs in Excel and reapply using Icacls/Xcacl however it seems the ACL export from either isn't that user friendly to modify in Excel. Does anyone have suggestions or recommendations basically I need to ACL for each folder listed and then import into Excel for modification. Many thanks,Momo

Hello,This will require a basic script..If you post on the powershell forum someone might give you a quick solutionhttp://social.technet.microsoft.com/Forums/en-US/winserverpowershell/threadsIsaac Oben MCITP:EA, MCSE