An Exercise in Setting/Checking File Permissions (99273)

MORE INFORMATION

Here is an exercise that demonstates command line use of LAN Manager utilities related to saving and restoring file permissions.

Perform a BACKACC (saving permissions) to a floppy disk in Drive A from a FAT hard disk C, then a RESTACC (to restore permissions) from a floppy disk A to both an HPFS and FAT hard drive C. Use the same BACKACC and RESTACC commands when applying permissions to either a FAT or an HPFS drive.

The exercise demonstrates these commands:

net access     (see LAN Manager "Administrator's Reference," p. 23)
net access /add
net access /grant
net access /change
net access /tree

backacc     (see LAN Manager "Administrator's Reference," p.154)
restacc     (see LAN Manager "Administrator's Reference," p.185)
				

Using LAN Manager Permissions Utilities--An Exercise

1. Set up the initial directory on the server.
   
   Create directories: c:\test and c:\test2. Create a file test.doc by typing:

   c:\test directory:
   
   copy con test.doc

   Verify no permissions are associated currently with c:\TEST file.
   
   To add an ACL for the directory, type:

   net access c:\test /add

   To view the permissions, type:

   net access c:\test /tree

   Add permissions of "raxd" to the directory and "rax" to the file TEST.DOC. To grant initial permissions, type:

   net access c:\test /grant guest:raxd

   To change to override, type:

   net access c:\test\test.doc /change guest:rax

   Verify they were added to the c:\test tree.

   net access c:\test /tree

2. Backup the FAT permissions to a disk in drive A. Create the file A:\CTEST.ACL, by typing:

   backacc c:\test /f:c:\ctest /s

   Notice the /f: parameter designates the target on BACKACC and the source on RESTACC. You may want to reduce the possibility of an overwrite by designating the name of the ACL file explicitly as opposed to the default name ACKBAKX.ACL. (You can use "X" to distinguish drive).
3. Restore permissions to the FAT drive destination. Type:

   c:\test2

   Simulate a restore from a tape. Type:

   copy c:\test c:\test2

   Verify no permissions are associated currently with c:\test2 directory. Type:

   net access c:\test2 /add /tree

   Then type:

   net access c:\test2 /tree

   Restore the permissions to c:\TEST2 (could be a FAT destination). Type:

   restacc c:\test c:\test2 /f:a:\ctest.acl /s

   Notice:
   
   c:\TEST specifies what directory tree to retrieve from the CTEST.ACL permissions file; c:\TEST2 is the destination directory; a:\CTEST.ACL is the file containing (ACLs) file permissions.
   
   Verify the permissions were restored to the FAT destination c:\TEST2 by typing:

   net access c:\test2 /tree

4. Restore the FAT permissions to an HPFS 386 drive.
   
   Create a c:\test2 directory on an HPFS volume and use COPY CON to create TEST.DOC (or copy the original directory). Verify there are no permissions currently. Type:

   net access c:\test2 /add /tree
   net access c:\test2 /tree

   Restore the permissions to c:\TEST2 (HPFS386). Type:

   * net access c:\test c:\test2 /f:a:\ctest.acl /s

   Verify that permissions were restored to c:\TEST2. Type:

   net access c:\test2 /tree