Cacls cannot set the following permissions: change permissions, take ownership, execute, delete use XCACLS to set any of these. So BUILTIN\Administrators:(OI)(CI)F means that both files and Subdirectories will inherit 'F' (Fullcontrol) similarly (CI)R means Directories will inherit 'R' (Read folders only = List permission) To actually change the inheritance of Errors when changing permissions If a user or group has a permission on a file or folder and you grant a second permission to the same user/group on the same folder, Using CACLS The CACLS command does not provide a /Y switch to automatically answer 'Y' to the Y/N prompt. check over here
However, you can pipe the 'Y' character into the CACLS command using ECHO, use the following syntax: ECHO Y| CACLS filename /g username:permission To edit a file you must have the IO - Inherit only - The ACE does not apply to the current file/directory ID - Inherited - The ACE was inherited from the parent directory's ACL. The /T option will only traverse subfolders below the current directory If no options are specified CACLS will display the current ACLs e.g. When a new file is created it normally inherits ACL's from the folder where it was created. http://stackoverflow.com/questions/23526361/how-to-use-batch-file-to-give-a-folder-permission-to-the-everyone-group
more stack exchange communities company blog Stack Exchange Inbox Reputation and Badges sign up log in tour help Tour Start here for a quick overview of the site Help Center Detailed These can be combined as folllows: (OI)(CI) This folder, subfolders, and files. (OI)(CI)(IO) Subfolders and files only. (CI)(IO) Subfolders only. (OI) (IO) Files only. Display permissions for one file CACLS MyFile.txt Display permissions for multiple files CACLS *.txt Inherited folder permissions are displayed as: OI - Object inherit - This folder and files. (no inheritance
If a UserName or GroupName includes spaces then it must be surrounded with quotes e.g. "Authenticated Users" If no options are specified CACLS will display the ACLs for the file(s) Setting To be sure the CALCS command will work without errors use /E /R to remove ACL rights for the user concerned, then use /E to add the desired rights. Wildcards can be used to specify multiple files. Icacls Batch File If CACLS is used without the /E switch all existing rights on [pathname] will be replaced, any attempt to use the /E switch to change a [user:permission] that already exists will
To display the current folder CACLS . Icacls Folder Permissions Examples Limitations Cacls cannot display or modify the ACL state of files locked in exclusive use. Syntax CACLS pathname [options] Options: /T Search the pathname including all subfolders. (/TREE) /E Edit ACL, leave existing rights unchanged (/EDIT) /C Continue on access denied errors. (/CONTINUE) /L Work on For Vista and greater use icacls.
current community blog chat Super User Meta Super User your communities Sign up or log in to customize your list. Icacls Batch File Examples Examples: Add Read-Only permission to a single file CACLS myfile.txt /E /G "Power Users":R Add Full Control permission to a second group of users CACLS myfile.txt /E /G "FinanceUsers":F Now revoke