degarb 0 Newbie Poster

I am working on a script. (a gui is out of question) I need to lock a director to true read only. (fileattributes is a joke) cacls, in the system32 dir, works great for xp. Icacls for vista and windows7, but the syntax is far more confusing, and googling=no straight answer. Problem is that I am not sure of the syntax and cannot test.

If I wanted to make famphotos totally write protected (unable to extract files on the fly), and I am in ball park.

title icaclsbat
%SystemRoot%\system32\icacls.exe famphotos /grant:r Administrators:R
%SystemRoot%\system32\icacls.exe famphotos /grant:r users:R

or

title icaclsbat
%SystemRoot%\system32\icacls.exe famphotos /grant:r "Administrators":R
%SystemRoot%\system32\icacls.exe famphotos /grant:r "users":R

:F should bring it back to full access.