Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to set NTFS permissions for a user on another computer?

I have two nodes in a failover cluster. Both have a specific user account ("charley") local to the node. Charley has files on a disk that is part of a cluster group and in the case of a failover will move to the other node.

Is there a way to configure permissions so that while Node1\Charley creates a file on the disk, Node2\Charley can access (and modify) it after a failover?

share|improve this question

You can set permissions for users unknown to the local system by specifying the SID instead of the user name. You need a tool that accepts SIDs, of course. SetACL does.

It might be simpler to make "charley" a member of one of the predefined local groups like "users" which have a well-known SID (i.e. the same SID on every computer) and set permissions for that group instead of the local user.

share|improve this answer
I tried setting the permissions using the SID and icacls and icacls announced that "No mapping between account names and security IDs was done.". I tried Powershell set-acl but it doesn't support SIDs. – Andrew J. Brehm Jan 20 '12 at 14:15
Why don't you try SetACL as suggested? – Helge Klein Jan 20 '12 at 16:00
I found a SetACL which is a third-party tool. I cannot use third-party tools for this project. – Andrew J. Brehm Jan 20 '12 at 16:58

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.