Hello, I'm looking for a tool (if it exists) where i can say, "this user" recieves "this permission" on "these these and these folders". eg E:\Documents Folder A (inherits permissions from E:\Documents) - subfolder A (does not inherit permissions anymore) - subfolder B (does not inherit permissions anymore) Folder B (inherits permissions from E:\Documents) - subfolder A (does not inherit permissions anymore) - subfolder B (does not inherit permissions anymore) .... And i want to add user : "John" and he has to have FULL CONTROL to ALL folders (yes those that inherent and those that don't too) Is there any software that's capable of this?

I never heard about a tool that can peform a such thing. You should: * Give John FULL CONTROL pemission on the root folder * Give John FULL CONTROL permission on all the subfolders that does not inherit permissions This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

Yes, i know that's one way to do it, and that's ok if you have a small drive to manage BUT: I have a whole disk to manage of 700GB and has many many users and folders. Problem is that there are folders that dont inherit permissions, and so if i run a vbs script that does not work on those folderd. I'm fearing that i have to adjust those non-inheritable folders manually, but i'm hoping there is a better solution than that??

I recommand to you to post your question in "The Official Scripting Guys Forum!" so that you see if this can be done via a script (a script that changes NTFS permissions for all subfolders). This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

try CACLS /? in cmd. You need an /E switch.MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor; CCNA