Questions tagged [icacls]

icacls is a command-line program shipped with Microsoft Windows. It is used to edit user permissions for files and directories.

icacls is a command-line program shipped with Microsoft Windows. It is used to edit user permissions for files and directories, which are stored in so-called Access Control Lists associated with each securable object.

81 questions
23
votes
1 answer

Explain the output of ICACLS.EXE, line by line, item by item

What does this mean: C:\foo\> icacls . . NT AUTHORITY\IUSR:(M) BUILTIN\IIS_IUSRS:(M) BUILTIN\IIS_IUSRS:(OI)(CI)(M) NT AUTHORITY\IUSR:(OI)(CI)(M) BUILTIN\IIS_IUSRS:(I)(OI)(CI)(RX) NT AUTHORITY\IUSR:(I)(OI)(CI)(RX) NT…
Cheeso
  • 2,159
16
votes
1 answer

Command line to permanently get access to folder

UPDATE While I was able to use the method described in accepted answer once it failed a second time or was just giving too much trouble. Searching further I found SetACL by Helge Klein which is far far superior and does exactly what is needed. I…
12
votes
4 answers

Regardless of Windows language, how can I make the ICACLS command set a folder to have full access to everyone?

Background Say I have this command icacls C:\FullyAccessibleFolder /grant Users:(OI)(CI)F This works fine in English versions of Windows, but does not seem to work in French versions, giving the following error, presumably due to Users being…
Geesh_SO
  • 464
11
votes
1 answer

Cygwin mkdir makes directory I don't have permissions to

Using latest version of cygwin64 in Windows 10. I have managed to get a directory foo that has something strange about its permissions. I'm not quite sure how this happened but here are the symptoms: $ cd /f/temp/foo $ ls -lad . drwxrwx---+ 1 Mm…
M.M
  • 572
  • 1
  • 8
  • 19
10
votes
2 answers

icacls is giving access denied on remote file system

I am working on remote drive mounted on my system where i created some file i need to set some permission for that file. I used icacls but its not working. When i am trying to access file permission its working fine. Z:\test_permission>icacls…
Abhishek
  • 103
6
votes
2 answers

batch script that grants admin rights and goes through all files and folders

I have this, pretty sure its a little harsh but does the job, gives me all the rights to the files and folders on a drive when run on a drive, now I need help getting it to go into sub directories, so I dont need to copy the bat script inside every…
nwgat
  • 1,101
5
votes
1 answer

Understanding 'Access Denied' so that permissions can be reverted - icacls and takeown

Before taking ownership of files and folders I would like to understand how to view the current permissions so that they may be reverted. I am reciving an 'Access Denied' message to view or save permissions with elevated command prompt for…
user900431
4
votes
1 answer

Strange behaviour on /deny DE,W with icacls

I have the following scenario where I (admin) applied the (DE,W) deny permissions to the following folder test_folder for test_user who already has inherited modify permissions from parent folder: B:\>icacls test_folder test_folder …
4
votes
2 answers

What does “ICACLS C:\Windows\winsxs” do?

Originally posted by me on Stack Overflow, reposted here because this seems like a more relevant site for this question. Some wording has been slightly edited and more information has been added. When typing "icacls /?" into Windows command prompt,…
p-p-j
  • 43
4
votes
1 answer

Icacls Grant all users access to a folder including new files?

I use the following command (in an admin batch file) to grant all users (specifically users on the network) full access to a folder and all its contents: Icacls %fold% /grant Everyone:F /inheritance:e /T However, it is not applying these settings…
Mark Deven
  • 1,769
4
votes
2 answers

Setting a file to "Read-Only" in Windows with ICACLS

I knew how to set a file Read-Only with cacls: cacls "toto.txt" //E //P Everyone:N cacls "toto.txt" //E //G Everyone:R It removed all rights for everyone and then only added "Read" right. How to do the same thing with icacls? In particular, I…
3
votes
1 answer

Permissions on new created files (Windows 7 specific)?

Maybe a noob question, but how ALCs are determined on new created files (by running MyApp.exe)? I'd like to grant "users" full control on new files created inside C:\ProgramData\MyApp when launching myapp.exe. However this is not working: icacls…
gremo
  • 225
3
votes
1 answer

Why would the NTFS ACL utility `icacls` alter the system partition behind the scene?

I attached an hdd to my win7 machine and assigned the drive letter I: to the only partition on the hdd. The hdd was originally from another computer, and to avoid all those "you don't currently have permission..." dialogs, I decided to use icacls to…
netvope
  • 5,475
3
votes
2 answers

How to set 600 permission on a .pem file in w10?

I am unable to change permissions to 600 on an AWS .pem file. Note that "inherited permissions" were turned off in all efforts, and owner was set properly. Tried using this guide with File…
3
votes
0 answers

How to get the equivalent of chmod 600 using icacls on Windows?

I'm looking for a way to achieve the equivalent of chmod 600 on Windows using the icacls utility. For the user part I got the rw permission by using icacls file /inheritance:r /grant:r %USERNAME%:(R,W). Now, I'm having troubles with denying all the…
George R.
  • 131
1
2 3 4 5 6