Home / server / Questions / 383926
In Process
anonymous
Asked: 2012-04-28 11:59:48 +0800 CST

CACLS "Access is denied"

  • 772

I am on Windows Server 2008.

I'm trying to set deny permissions for a certain user on the Windows folder with the following command:

    cacls Windows /E /D sneakyUser

I get the error message "Access is denied." I'm running Command Prompt as Administrator.

I also tried ICACLS -- no luck.

    icacls Windows /deny sneakyUser:f

These commands work on individual files within the Windows folder, but not on the folder itself. Is this behavior by design, or am I doing something wrong?

Edit: Interestingly enough, the command works fine in Windows Server 2003.

windows-server-2008 permissions icacls

2 Answers

  1. Access to a lot of stuff in the Windows folder is restricted to the TrustedInstaller account. This is by design.

    http://msdn.microsoft.com/en-us/library/windows/desktop/aa382530%28v=vs.85%29.aspx

    • 2

  2. If you have UAC still enabled, log in as the Local Admin (non-domain account) to see if it works. Running as Administrator may not be enough, even thought it should be.

    • 0