Is there a better way to change folder permissions?

bkfta1190

Estimable
Jan 6, 2016
3
0
4,510
Alright everyone,
So I have an absurd task ahead of me; I need to remove and add groups for permissions to about 40,000 folders... I have gotten through about 4,000, and there just has to be a better/easier/faster way to do this. So what I have been doing is right clicking on the folder, going to the security tab, clicking advanced to disable inheritance and selecting the option to "convert to explicit permissions," then i edit the group names by adding certain groups, and removing certain groups. Each of the folders needs to add a folder specific group, as well as a group that will be added to all folders This is hands down the most tedious and relentless task i have ever undertaken, but it needs to be done. Any of you gurus out there know a way to possibly automate this process using something like Powershell? Would taking ownership of all the files make this process easier? I am using windows server 2012 R2.
Seriously, any help at all would be the greatest thing for me right now.
Thank you all ahead of time,
BKFTA
 

George Phillips

Estimable
Jun 17, 2015
27
0
4,610
I suggest to first crate few master folders based on the types of permissions you want to apply. Then move folders that require certain type of permissions to one of the master folders, and make changes to the master folder you want to change and force it to inherit the permission to all sub folders. This way, hundreds or thousands of folders that require the same type of permissions can be changed once. After that's done, work on the next master folder with the same process. Once all folders have been moved to their respective master folders and all permissions applied, move folders out of the master folders to where they were at. Hopefully this helps anther system administrator like me.
 

bkfta1190

Estimable
Jan 6, 2016
3
0
4,510
Thanks for the quick response George,
I thought about doing that, but a problem remains; I need to add a group named after the respective folder, for each individual folder. I assume this would be great for removing groups and instantly disabling inheritance, right?
Thanks again,
BKFTA

 

bkfta1190

Estimable
Jan 6, 2016
3
0
4,510
George,
Perhaps you know the answer to this question, perhaps you dont; Each folder has a specific group in it, which was whatever user created it - some have this group, some only have the domain group. I can remove the domain group from all of these at the same time, in one fell swoop by removing it from the parent folder because i can see it when i open the security tab of the parent folder. Is there any way that i could set the parent folder to remove the random group that may or may not be there?
Thanks,
BKFTA