MAKEMSI quickly and reliably creates MSI files in a non-programmatic way
Have your say! Join the MAKEMSI discussion list or view archive! Suggest improvements. No question too simple or too complex.
[Bottom][Contents][Prev]: SubInACL.exe[Next]: Services Applet
Have your say! Join the MAKEMSI discussion list or view archive! Suggest improvements. No question too simple or too complex.
\->Tips and Tricks->Tools->Security Related Tools->xcacls.exe

xcacls.exe

A Microsoft tool from a resource kit.

xcacls.exe /?

Displays or modifies access control lists (ACLs) of files



XCACLS filename [/T] [/E|/X] [/C] [/G user:perm;spec] [/R user [...]]

               [/P user:perm;spec [...]] [/D user [...]] [/Y]

   filename           Displays ACLs.

   /T                 Changes ACLs of specified files in

                      the current directory and all subdirectories.

   /E                 Edit ACL instead of replacing it.

   /X                 Same as /E except it only affects the ACEs that the

                      specified users already own.

   /C                 Continue on access denied errors.

   /G user:perm;spec  Grant specified user access rights.

                      Perm can be: R  Read

                                   C  Change (write)

                                   F  Full control

                                   P  Change Permissions (Special access)

                                   O  Take Ownership (Special access)

                                   X  EXecute (Special access)

                                   E  REad (Special access)

                                   W  Write (Special access)

                                   D  Delete (Special access)

                      Spec can be the same as perm and will only be

Press ENTER to continue...
                           applied to a directory. In this case, Perm

                           will be used for file inheritence in this

                           directory. If not omitted: Spec=Perm. Special values

                           for Spec only:

                                   T  Not Specified (for file inherit,

                                      only for dirs valid)

                                      At least one access right has to follow!

                                      Entries between ';' and T will be ignored!

   /R user            Revoke specified user's access rights.

   /P user:perm;spec  Replace specified user's access rights.

                      for access right specification see /G option

   /D user            Deny specified user access.

   /Y                 Replace user's rights without verify



Wildcards can be used to specify more that one file in a command.

You can specify more than one user in a command.

You can combine access rights.


Microsoft awarded me an MVP (Most Valuable Professional award) in 2004, 2005, 2006, 2007, 2008 & 2009 for the Windows SDK (Windows Installer) area.Please email me any feedback, additional information or corrections.
See this page online (look for updates)

[Top][Contents][Prev]: SubInACL.exe[Next]: Services Applet


MAKEMSI© is (C)opyright Dennis Bareis 2003-2008 (All rights reserved).
Friday October 13 2017 at 2:08pm
Visit MAKEMSI's Home Page
Microsoft awarded me an MVP (Most Valuable Professional award) in 2004, 2005, 2006, 2007, 2008 & 2009 for the Windows SDK (Windows Installer) area.