Setting Cluster File-Share Permissions

Q: I'm trying to programmatically setcluster file-share permissions on ourWindows 2000 Advanced Server cluster.I've tried using the subinacl.exe command-line tool but to no avail becausesubinacl.exe wants to know the SID foreach trustee I want to grant permissionsto. Is there another command-line toolI can use to automate the configurationof file-share permissions on a cluster?

A: Yes, you can use cluster.exe toconfigure your cluster's file-share permissions.To learn more about thiscommand-line tool, see the Microsoftarticle "How to Create a Server ClusterFile Share with Cluster.exe" (http://support.microsoft.com/?kbid=284838).

A word of caution: Unlike MicrosoftCluster Administrator, which sets theEveryone group's permissions to readonlyby default, cluster.exe sets theEveryone group's permissions to fullcontrol by default. So, depending onyour situation, you might need tochange the default permissions. I should also point out that, in additionto SIDs, subinacl.exe supports thestandard DomainNameUsernamesyntax that's commonly used to identifya trustee. You might want to take a secondlook at SubInAcl's usage instructions,which you can obtain byrunning the command

subinacl /help /full