[_m3]

Nachdem die Berechtigungen and den SIDs häengen, Du aber die Accounts neu anlegst, wird Dir so ein Tool (vorher Namen auslesen, nacher ACl setzen) nicht erspart bleiben.

Eventuell hilft Dir Perl weiter: http://www.roth.net/perl/perms/

In this example we will be placing read only permissions for cartman and full permissions for administrator on the file c:\test.txt and removing all references for guest from and then explicitly denying joel access to the c:\temp directory.

Apply permissions on a file.

use Win32::Perms;

# Create an empty Security Descriptor
$::ThisPage = new Win32::Perms || die;

# One of two ways to add an ACE
$::ThisPage->Allow('cartman', READ);

# The second way to add an ACE
$::ThisPage->Add( {Account=>'administrator', Mask=>FULL } );

# Set the file's permissions
$::ThisPage->Set('c:/test.txt');

HTH