Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to duplicate a user's NTFS permissions to another user? For example, the boss says, "Bob needs the exact same access to this folder as Tom". There are too many files and folders to check manually.

share|improve this question
If you're doing it right then your NTFS permissions are based on Security Group membership and it's a simple matter to make Bob a member of the same Security Groups as Tom. – joeqwerty Jun 17 '13 at 20:09
If it had been setup correctly by the previous IT, then I wouldn't be asking the question :-) – user1594322 Jun 17 '13 at 20:14
You didn't specify how the permissions had been set up and I didn't want to make assumptions. – joeqwerty Jun 17 '13 at 20:16
If it isn't setup correctly, and you know it, why aren't you correcting it? If you want to script the correction process, PowerShell is your friend, but it's still a bit tedious depending on how bad the situation is. – Chris S Jun 17 '13 at 20:18
Look into something like:… and correct the way it is currently being done. No sense in continuing down the same incorrect path just because that's "how it was setup". – TheCleaner Jun 17 '13 at 20:21
up vote 8 down vote accepted

No, not unless you write a custom script that will crawl your network and detect these permissions on remote file servers.

This is why it's so important to use groups in your permissions, then it would be a matter of simply dropping the new user into the same groups as the old user.

share|improve this answer
Thanks. I ended up creating a script that parses the output of "icacls path /save output.txt /T" and compared the permissions to make sure a new group matched the permissions. Luckily there were not any differences. If there were a lot of differences it would have been a big pain to sort out. – user1594322 Jun 17 '13 at 21:16

Icacls or robocopy can do this. You should also look at dynamic access control to avoid using groups or assigning specific users.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.