Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
  - Windows 2003
    - Admin Tips
      - Admin
        Modifying ACLs from the command line

Section(s): Admin , Miscellaneous
Published on Jun 05, 2007.
Last Modified on Jun 05, 2007.
Last Modified by Mitch Tulloch.
Rating: Not Rated

Using a script to modify permissions.

First there was cacls.exe, then xcacls.exe, then the dreaded and poorly-documented subinacl.exe. Each of these tools can be used in some fashion to view or modify access control lists (ACLs) i.e. permissions on files/folders on an NTFS volume. What you may not be aware of however is that Microsoft has released an updated version of xcacls that is actually a script instead of an executable. You can obtain xcacls.vbs from the Microsoft Download Center at http://download.microsoft.com/download/f/7/8/f786aaf3-a37b-45ab-b0a2-8c8c18bbf483/XCacls_Installer.exe and you can read about it further in KB 825751 which is found at http://support.microsoft.com/kb/825751.

Mitch Tulloch was lead author for the Windows Vista Resource Kit from Microsoft Press, which is THE book for IT pros who want to deploy, maintain and support Windows Vista in mid- and large-sized network environments. For more information see www.mtit.com.

About Mitch Tulloch

Mitch Tulloch is a widely recognized expert on Windows administration, networking, and security. He has been repeatedly awarded Most Valuable Professional (MVP) status by Microsoft for his outstanding contributions in supporting users who deploy and use Microsoft platforms, products and solutions. Mitch has published over two hundred articles on different IT websites and magazines, and he has written or contributed to almost two dozen books and is lead author for the Windows 7 Resource Kit from Microsoft Press. For more information, see www.mtit.com .