We have several large storage servers running Windows Server 2008 R2. Due to program limitations each server has several disk that had to be broken up into 1TB volumes. These volumes are all mount points on the lettered volume for the disk. The problem that I am facing is changing the permissions on the mount points. Unfortunately, using commands like icacls and get/set-acl only affect the permissions of the folder on the lettered drive and not on the mounted volume. This results in the folders on mounted volume not inheriting the permissions set using icacls or get/set-acls. How can I script setting the psermissions on the mount point so that subfolders inherit the required permissions?Example of the disconnect in permissions


I thought that I tried icacls as shown below, but I found out that I didn't try it. I was able to get the permissions I was expecting. What I am still trying to find is a PowerShell way to edit permissions using the Volume{GUID} path.

icacls "\?\Volume{GUID}"


I'm using this code successfully in PowerShell to set permissions on a mounted volume which are also correctly inherited by its sub-directories and files:

mountvol "C:\path-to-mounted-volume" /L | ForEach-Object {
  ICACLS $volume /grant:r "DOMAIN\GROUP:(OI)(CI)M"
  ICACLS $volume /grant:r "DOMAIN\USER:(OI)(CI)F"

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.