[Hackoo]

Hi all 🤝
I made this piece of code to change permission to a folder and its contents (subfolders and files) with the command ICACLS

My issue is :
By clicking on properties of this folder > security I can always manually modify the access rights of this folder.
Is there a script to prevent this ?

ChangePermission.bat
ChangePermission.bat (Click to View)

Code

@echo off
Title Example of using the ICACLS command by Hackoo 2017
Mode con cols=70 lines=10 & color 0E
set "folder=%userprofile%\Desktop\TestHackoo"
If not exist "%folder%" MD "%folder%"
:Main
Cls
echo ==================================
echo              Menu
echo ==================================
echo      [1] CONTROL TOTAL
echo      [2] READING ONLY
echo      [3] WRITING ONLY
echo -----------------------------------
echo(
set /p "MyChoice=Please choose 1,2,3 : "

If "%MyChoice%" EQU "1" (
    icacls "%folder%" /grant:r "%username%:(OI)(CI)F">nul 2>&1
    ICACLS "%folder%" /inheritance:r
        If "%ErrorLevel%" EQU "0" (
            cls & echo( & color 0A
            echo "%folder%" HAVE A CONTROL TOTAL !
            Timeout /T 1 /nobreak>nul
            Explorer %folder% & Exit
        ) else (
            cls & echo( & color 0
            echo Command Failure !
        )
)

If "%MyChoice%" EQU "2" (
    icacls "%folder%" /grant:r "%username%:(OI)(CI)R">nul 2>&1
    ICACLS "%folder%" /inheritance:r
        If "%ErrorLevel%" EQU "0" (
            cls & echo( & color 0C
            echo "%folder%" IS READING ONLY !
            Timeout /T 1 /nobreak>nul
            Explorer %folder% & Exit
        ) else (
            cls & echo( & color 0C
            echo Command Failure !
        )
)

If "%MyChoice%" EQU "3" (
    icacls "%folder%" /grant:r "%username%:(OI)(CI)W">nul 2>&1
    ICACLS "%folder%" /inheritance:r
        If "%ErrorLevel%" EQU "0" (
            cls & echo( & color 0C
            echo "%folder%" IS WRITING ONLY !
            Timeout /T 1 /nobreak>nul
            Explorer %folder% & Exit
        ) else (
            cls & echo( & color 0C
            echo Command Failure !
        )
)

[Phlox]

I think you are asking to remove security tab i think you can do this with a group policy.

[Hackoo]

I think you are asking to remove security tab i think you can do this with a group policy.

Thank you for your answer Phlox, but, how to remove the security tab with a batch script ?

---

EDIT :
I found a hint here

To Disable Security tab:

Code

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v Nosecuritytab /t REG_DWORD /d 1 /f

To Enable Security tab:

Code

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v Nosecuritytab /t REG_DWORD /d 0 /f

---

Here is the new script :
ChangePermission.bat
ChangePermission.bat (Click to View)

Code

@echo off
Title Example of using the ICACLS command by Hackoo 2017
Mode con cols=70 lines=10 & color 0E
set "folder=%userprofile%\Desktop\TestHackoo"
If not exist "%folder%" MD "%folder%"
:Main
Cls
echo ==================================
echo              Menu
echo ==================================
echo      [1] CONTROL TOTAL
echo      [2] READING ONLY
echo      [3] WRITING ONLY
echo -----------------------------------
echo(
set /p "MyChoice=Please choose 1,2,3 : "

If "%MyChoice%" EQU "1" (
    icacls "%folder%" /grant:r "%username%:(OI)(CI)F">nul 2>&1
    icacls "%folder%" /inheritance:r
    Call :Enable_Security_tab
        If "%ErrorLevel%" EQU "0" (
            cls & echo( & color 0A
            echo "%folder%" HAVE A CONTROL TOTAL !
            Timeout /T 1 /nobreak>nul
            Explorer %folder% & Exit
        ) else (
            cls & echo( & color 0
            echo Command Failure !
        )
)

If "%MyChoice%" EQU "2" (
    icacls "%folder%" /grant:r "%username%:(OI)(CI)R">nul 2>&1
    icacls "%folder%" /inheritance:r
    Call :Disable_Security_tab
        If "%ErrorLevel%" EQU "0" (
            cls & echo( & color 0C
            echo "%folder%" IS READING ONLY !
            Timeout /T 1 /nobreak>nul
            Explorer %folder% & Exit
        ) else (
            cls & echo( & color 0C
            echo Command Failure !
        )
)

If "%MyChoice%" EQU "3" (
    icacls "%folder%" /grant:r "%username%:(OI)(CI)W">nul 2>&1
    icacls "%folder%" /inheritance:r
    Call :Disable_Security_tab
        If "%ErrorLevel%" EQU "0" (
            cls & echo( & color 0C
            echo "%folder%" IS WRITING ONLY !
            Timeout /T 1 /nobreak>nul
            Explorer %folder% & Exit
        ) else (
            cls & echo( & color 0C
            echo Command Failure !
        )
)
::*********************************************************************************************************************
:Enable_Security_tab
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v Nosecuritytab /t REG_DWORD /d 0 /f>nul 2>&1
exit /b
::*********************************************************************************************************************
:Disable_Security_tab
REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v Nosecuritytab /t REG_DWORD /d 1 /f>nul 2>&1
exit /b
::*********************************************************************************************************************

[ɩᴄᴀʀᴜȿ ᴌוᴠᴇѕ™]

Hackoo!!! !ERRORLEVEL! needs to be expanded inside of ( )

:)

[jyuht]

Why are you worried about the security tab?

[Beigevenus]

Why are you worried about the security tab?

If he made a Batch script to change the permissions, he probably doesn't want a user to be able to change them by other means than the Batch file!