I am working on a script. (a gui is out of question) I need to lock a director to true read only. (fileattributes is a joke) cacls, in the system32 dir, works great for xp. Icacls for vista and windows7, but the syntax is far more confusing, and googling=no straight answer. Problem is that I am not sure of the syntax and cannot test.
If I wanted to make famphotos totally write protected (unable to extract files on the fly), and I am in ball park.
title icaclsbat
%SystemRoot%\system32\icacls.exe famphotos /grant:r Administrators:R
%SystemRoot%\system32\icacls.exe famphotos /grant:r users:R
or
title icaclsbat
%SystemRoot%\system32\icacls.exe famphotos /grant:r "Administrators":R
%SystemRoot%\system32\icacls.exe famphotos /grant:r "users":R
:F should bring it back to full access.