If you can't use Powershell, psexec and icacls should do the trick.
Yep - these can all do it. If you don't have powershell, figure out what the ACL should look like, write out the icacls.exe command & variables, then save it in a batch file and script it out to the other boxes.
What OS(es) are involved? All W2K3?