Old Windows 2003 box holding shared folders that's being decommissioned. There's a folder being shared, inside this folder is one folder per user. Each folder has that user added to the security with full permissions. Then any user created sub folders below that...
I want to make it so they can only read from their folders for the next month prior to decommissioning. So remove full and write permissions, for each user.
In linux this would be chmod -R 550 . (where they had something like 770 before)
It looks like CACLS would be what I want to use in Windows world, but it looks like you would have to specify a username for it. I can't just strip write permission for *. So I'd need some kind of recursive batch script on a windows 2003 box for several thousand folders to read the username, file, and modify the files permissions for that username.
This seems like a headache, even if it works (I'm not convinced it wouldn't break everything).
Is there an easier way? For example, if I added permissions for the object everyone to the root folder and denied it write permissions, would this take precedence over a users individual permissions below? Or is there a way I'm not seeing to strip write permissions without defining every user/folder in a script?