Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [icacls]

54 questions
17
votes
2 answers

How to replace permissions and everything inside with icacls on Windows Server 2012?

Using Windows Server 2012 R2 AND Windows Server 2008 R2. I have a folder called C:\temp\test and I want to grant access to SYSTEM and a user and all files and subdirectories, and remove everthing else. I've tried this command but all the existing…
Mark Allison
  • 2,098
  • 7
  • 26
  • 45
12
votes
1 answer

NTFS ACL's: What is the difference between object and container inhertiance?

I am looking at using icacls.exe. However, before proceeding, I wanted clarification on the difference between these two ACL's: (OI) - object inherit (CI) - container inherit
Belmin Fernandez
  • 10,629
  • 26
  • 84
  • 145
11
votes
2 answers

Unable to assign group permissions with ICACLS on Windows Server 2012

I cannot get icacls to accept my group for adding permissions. I am using an elevated power shell with the following command: icacls 'C:/foo' /grant:r 'Group Foo':f I get the following error: Invalid parameter "Group Foo" I have tried using the…
user319862
  • 757
  • 2
  • 8
  • 18
6
votes
1 answer

Replace permission entries on all child objects using icacls

I'm trying to set Replace permission entries on all child objects using icacls but I can't seem to do it. I want new folders/files to receive the permissions as well so I want to check the box Replace all child object permissions with inheritable…
never_odd_or_even
  • 325
  • 1
  • 4
  • 12
5
votes
1 answer

NTFS: User can edit/delete files without rights

I have a very strange NTFS rights phenomenon on a fileserver and I cannot find my mistake, pulling my hair out for hours now. What am I missing? My goal is: User from Group-A should be able to write new files/foldes into a folder ("add files").…
bjoster
  • 4,423
  • 5
  • 22
  • 32
5
votes
2 answers

ICACLS Substitute Failing "No mapping between account names and security IDs was done."

Running a really simple ICACLS command after I copied a directory over to a new server with permissions intact. I need to change a SID from an old server user group to a new server user group. Copied folder with ROBOCOPY source dest /SEC... Got the…
Brad
  • 165
  • 1
  • 3
  • 10
5
votes
1 answer

ICACLS IIS AppPool\DefaultAppPool = invalid parameter

The following command: icacls c:\inetpub\wwwroot\ /grant "IIS AppPool\DefaultAppPool":F Constantly returns Invalid parameter "IIS AppPool\DefaultAppPool" For any app pool name on any folder, I'm running this from powershell as admin. I'm sure…
DannyT
  • 225
  • 3
  • 7
4
votes
3 answers

Grant MODIFY on "All Subfolders and Files" with icacls, but only give Read to top level folder

One of our Windows servers that has some user folders on it has some pretty screwed up permissions. What I want it for SYSTEM and Domain Admins to have full control of all folders. I want the users to have read only on the top-level folder (which is…
MDMarra
  • 100,183
  • 32
  • 195
  • 326
4
votes
2 answers

CACLS "Access is denied"

I am on Windows Server 2008. I'm trying to set deny permissions for a certain user on the Windows folder with the following command: cacls Windows /E /D sneakyUser I get the error message "Access is denied." I'm running Command Prompt as…
anonymous
  • 53
  • 1
  • 4
4
votes
2 answers

Finding files/folders with write/full control permissions for Everyone on Windows 2003

Trying to clean up permissions on this IIS6 w/ PHP CGI server, it seems that several files/folders have write permissions for Everyone. (You can probably guess what is happening, repeatedly.) So, basically, I'm looking for the equivalent of find…
Josh Y.
  • 280
  • 1
  • 2
  • 7
3
votes
1 answer

NTFS Access Control Entries difference between icacls output and GUI

When I add/edit NTFS permissions for a user/group from command line via icacls application, i get multiple ACE entries in the list for the same thing, while from the GUI every ACE (since they are all the same) are compacted in a single entry. I…
m4dm4n
  • 31
  • 1
3
votes
1 answer

change ownership using Icacls on windows

On a windows 7 enterprise 64 bit OS - I want to change ownership of a folder inherited to all sub-folders using ICACLS I am logged in as standard user. The folder is owned by an administrator user, and I run the icaclsas that elevated user's…
user1874594
  • 133
  • 1
  • 1
  • 4
3
votes
1 answer

icacls Command regaining Permission by Administrator and Everyone

Accidentally I gave Deny permission to 'Everyone' folder which points to my website. I am using Windows 2012. Now I get access denied for Administrator and Website shows 500 error. Can anyone give any icacls command how 'Administrator' get back…
Himadri
  • 33
  • 1
  • 5
2
votes
2 answers

PowerShell Icacls permissions with domain group

I am trying to use icacls to set permissions for a domain group, but for some reason it is not working. icacls "C:\Temp\ACL" /T /C /grant ("Everyone"+':F') ("System"+':F') ("Administrators"+':F') ("DOMAIN\groupname"+':C') >> C:\temp\c.log I am…
ChaChaPoly
  • 243
  • 1
  • 3
  • 15
2
votes
1 answer

icacls reset inherited permissions on multi folders

Looking to find a better way to script this for multiple folders. Right now I have a icacls script that is reseting permissions on files/folder from a parent folder: icacls "e:\FTP_Root\user1\*" /q /c /t /reset icacls "e:\FTP_Root\user2\*" /q /c /t…
Jay501
  • 23
  • 1
  • 1
  • 4
1
2 3 4