[Feature request] Restore ACL only

[Fred_vBrain]

Hi all,

one of my customers approached me and was asking about how to restore individual ACLs of a file or folder. He said Commvault can do this. After a short research I found this: http://documentation.commvault.com/comm ... e_area.htm.

Personally this would be a great features because what happens if an admin accidentally changed the permission of some folders or files. Especially if he get's locked out be this action.
So in that case you just want to restore the ACL and not the complete folder/files/data.

Cheers,
Fred

[vClintWyckoff]

This doesn't fix the "lock out" issue you mentioned however, you can use the existing file level recovery option and backup browser to view the properties of files / folder then reapply or script to the files / folders in question.

[Fred_vBrain]

Hi Clint.

the lock out was just a "bad" example! Ok yes I can do that but it's not really a pretty solution. But yes without the lack of this function a customer needs to go this way.

Thanks.

[azlanmatt]

+1

[mrholm]

+1

[Egor Yakovlev]

This feature request is on track and I have noted your +1s!
/Cheers

[BenMiller]

+1 for a couple of my customers as well. But my customer would want this for NAS\backups and Vmware FLR restores.

[DBerns]

+1 would be a great feature for us too

[Egor Yakovlev]

Feature is on track with no clear ETA.
Note that you can mount the backup and use icacls to save\restore ACLs from backup.
It is not very scalable and as flexible as a UI option, but for those rare cases when that type of recovery is really needed, it might be a solid workaround.
/Cheers!

[unify_nathan]

+1

I just had the "oh no" moment when I saw Windows File Server walking through applying ACLs down a large branch of a production fileserver. I'm sure many sysadmin/syseng types browsing this forum can relate.

I've done the whole iCacls backup/restore dance previously, too, and guess I'll have to do so again, but like you say: it's not as good as the feature your competitors have already, so hopefully this might be something that can get some attention for maybe being added to v.next?

[Zew]

+1 This could have saved me a little while back, I managed to repair the ACLs manually, but this could have been another great save from the Veeam side of things.

[unify_nathan]

Came back to add a quick note: between whenever the last time I needed to do this, and this most recent incident yesterday, the tools seem to have improved a lot. I think maybe the earlier time I'm remembering, you maybe had to use xcacls rather than icacls and it was a convoluted mess of commandline switches to get a backup. Now (quoting right out of the helptext....) it's as simple as:

icacls c:\windows\* /save AclFile /T
- Will save the ACLs for all files under c:\windows
and its subdirectories to AclFile.

icacls c:\windows\ /restore AclFile
- Will restore the Acls for every file within
AclFile that exists in c:\windows and its subdirectories.
fdb
Also, #protip....
Run as SYSTEM to reduce chances of having a scenario where you lack enough permission to read/write the ACLs on the filesystem you're trying to un-FUBAR. Good old psexec -s -i <cmd.exe> is my favourite