Q: I'm trying to programmatically set
cluster file-share permissions on our
Windows 2000 Advanced Server cluster.
I've tried using the subinacl.exe command-
line tool but to no avail because
subinacl.exe wants to know the SID for
each trustee I want to grant permissions
to. Is there another command-line tool
I can use to automate the configuration
of file-share permissions on a cluster?
A: Yes, you can use cluster.exe to
configure your cluster's file-share permissions.
To learn more about this
command-line tool, see the Microsoft
article "How to Create a Server Cluster
File Share with Cluster.exe" (http://
support.microsoft.com/?kbid=284838).
A word of caution: Unlike Microsoft
Cluster Administrator, which sets the
Everyone group's permissions to readonly
by default, cluster.exe sets the
Everyone group's permissions to full
control by default. So, depending on
your situation, you might need to
change the default permissions. I
should also point out that, in addition
to SIDs, subinacl.exe supports the
standard DomainName\Username
syntax that's commonly used to identify
a trustee. You might want to take a second
look at SubInAcl's usage instructions,
which you can obtain by
running the command
subinacl /help /full