Home / server / Questions / 63958
Accepted
Zian Choy
Asked: 2009-09-10 16:02:07 +0800 CST

How do I add file permissions with the command line in Windows Server 2003?

  • 772

I've tried using xcacls and cacls on a Windows Server 2003 computer but they all replace the existing permissions when I use /g. Does anyone know of a command-line tool that will simply add permissions?

windows-server-2003

3 Answers

  1. Best Answer

    Make sure that you use /G and /E (edit mode) together (and most likely /T as well).

    For reference, here is the complete usage information from the command CACLS /?

    CACLS filename [/T] [/E] [/C] [/G user:perm] [/R user [...]]
               [/P user:perm [...]] [/D user [...]]
   filename      Displays ACLs.
   /T            Changes ACLs of specified files in
                 the current directory and all subdirectories.
   /E            Edit ACL instead of replacing it.
   /C            Continue on access denied errors.
   /G user:perm  Grant specified user access rights.
                 Perm can be: R  Read
                              W  Write
                              C  Change (write)
                              F  Full control
   /R user       Revoke specified user's access rights (only valid with /E).
   /P user:perm  Replace specified user's access rights.
                 Perm can be: N  None
                              R  Read
                              W  Write
                              C  Change (write)
                              F  Full control
   /D user       Deny specified user access.
Wildcards can be used to specify more that one file in a command.
You can specify more than one user in a command.

Abbreviations:
   CI - Container Inherit.
        The ACE will be inherited by directories.
   OI - Object Inherit.
        The ACE will be inherited by files.
   IO - Inherit Only.
        The ACE does not apply to the current file/directory.
    • 6

  2. You can also try to use a tool from helgeklein.com, called SetACL.exe. Very powerful tool, try it.

    • 1

  3. If you take a look at CACLS, don't forget to take a look at ICACLS

    • 0