I have a huge directory on an NTFS filesystem (i.e. a top-level directory containing tens or hundreds of millions of descendant nodes, with the file nodes probably on average about 3 levels deep) that I need to change permissions for. In particular, I need to give a new user (or group) read-only access to absolutely everything in the directory tree.
The most obvious place to do this is in Windows Explorer, by right-clicking the top-level directory, and going to the security tab of the directory properties window. However, when I try the obvious things there, Windows Explorer seems excited to recursively traverse the whole directory tree and try to modify something or other about the permissions of each node in the tree. This is extremely inefficient for such a large directory!
Can anyone offer any tips for changing permissions without this recursive descent? Do I need to click something particular in the UI? Do I need to use command-line tools? Could this potentially be the result of a previous sysadmin doing something weird to the permissions in this directory?
I also need to enable network sharing and let the user/group mount the directory over the network. Haven't tried that yet, so I don't know if there's a similar can of worms when I try to enable sharing.
This is Windows 2008 Server if it matters.
EDIT: People are right that it probably makes more sense to give permission to a domain group rather than a particular account, so I've made note of this above. (That's what I was doing anyway. I don't know why I specifically asked about adding a user in the original question. Sorry for the sloppiness.) But of course adding a group to a folder's permissions list isn't any faster than adding a user. (None of the existing groups are assigned read-only permissions.)