From 659ce766a4f77086746e294c6a5c67a2c5f6f663 Mon Sep 17 00:00:00 2001
From: "Michael H.G. Schmidt" <michael@schmidt2.de>
Date: Tue, 15 Aug 2023 14:21:42 +0200
Subject: [PATCH] .

---
 tools/setgroup-noaccess.cmd | 45 +++++++++++++++++++++++++++++++++++++
 1 file changed, 45 insertions(+)
 create mode 100644 tools/setgroup-noaccess.cmd

diff --git a/tools/setgroup-noaccess.cmd b/tools/setgroup-noaccess.cmd
new file mode 100644
index 0000000..0d67066
--- /dev/null
+++ b/tools/setgroup-noaccess.cmd
@@ -0,0 +1,45 @@
+@echo off
+
+IF %1.==. GOTO USAGE
+IF %2.==. GOTO USAGE
+
+if /I %1 == %SystemDrive% goto nosystemdrive
+if /I %1 == %SystemDrive%\ goto nosystemdrive
+
+if NOT EXIST %1 (
+  echo ERROR: file or directory not found!
+  exit /b
+)
+
+echo removing access rights for Group [ %2 ] on [ %1 ] ...
+
+if EXIST %1\* (
+
+  echo *** DIRECTORY mode ***
+  takeown /F %1 /R /A /D Y 1>nul
+  icacls %1 /inheritance:r
+  icacls %1 /grant Administrators:F /t /c /l /q
+  icacls %1 /remove %2 /t /c /l /q
+
+) else (
+
+  echo *** FILE mode ***
+  takeown /F %1 /A  1>nul
+  icacls %1 /inheritance:r
+  icacls %1 /grant Administrators:F /c /l /q
+  icacls %1 /remove %2 /c /l /q
+
+)
+echo.
+icacls %1
+GOTO END
+
+:nosystemdrive
+echo ERROR: cannot use the SystemDrive!
+GOTO END
+
+:USAGE
+echo "usage: %0 <path> <group>"
+
+:END
+