CACLS

  • Thread starter Thread starter Marcelo López
  • Start date Start date
M

Marcelo López

I still have this problem. could anyone help me ??

From: "Marcelo López" <[email protected]>
Subject: Re: Problem using CACLS
Date: Thursday, April 01, 2004 10:11 AM

hi,

if i add the last user grant: "domain admins":F
the administrator could access my folder, and i want only my special user to
access the folder !!

May be i'm forgotting some command to include all subdirs in my cacls
command ?

Regards


 
Would "cacls /t /g user:F" help?

By the way, any user with administrative privileges on the machine could
take ownership of the file and reset the permissions. Also, members of the
Backup Operators group can gain access to the file.

Oli


Marcelo López said:
I still have this problem. could anyone help me ??

From: "Marcelo López" <[email protected]>
Subject: Re: Problem using CACLS
Date: Thursday, April 01, 2004 10:11 AM

hi,

if i add the last user grant: "domain admins":F
the administrator could access my folder, and i want only my special user
to
access the folder !!

May be i'm forgotting some command to include all subdirs in my cacls
command ?

Regards
Click to expand...
 
hi,
use XCACLS
example:
xcacls folder /e /p specialuser:F

XCACLS filename [/T] [/E|/X] [/C] [/G user:perm;spec] [/R
user [...]]
[/P user:perm;spec [...]] [/D user [...]]
[/Y]

Description:
Displays or modifies access control lists (ACLs) of
files.

Parameter List:
filename Displays ACLs.

/T Changes ACLs of specified files in
the current directory and all
subdirectories.

/E Edits ACL instead of replacing it.

/X Same as /E except it only affects
the ACEs that
the specified users already own.

/C Continues on access denied errors.

/G user:perm;spec Grants specified user access rights.

Perm can be:
R Read
C Change (write)
F Full control
P Change Permissions
(Special access)
O Take Ownership (Special
access)
X EXecute (Special access)
E REad (Special access)
W Write (Special access)
D Delete (Special access)

Spec can be the same as perm and
will only be
applied to a directory. In this
case, Perm
will be used for file inheritance
in this
directory. By default, Spec=Perm.
Special values for Spec only:
T Valid for only for
directories.
At least one access
right has to
follow. Entries
between ';' and T
will be ignored.

/R user Revokes specified user's access
rights.

/P user:perm;spec Replaces specified user's access
rights.
Access right specification as same
as
/G option.

/D user Denies specified user access.

/Y Replaces user's rights without
verify.

NOTE:
Wildcards can be used to specify more than one file.
More than one user can be specified.
Access rights can be combined.

Examples:
XCACLS /?
XCACLS TEMP.DOC /G ADMINISTRATOR:RC
XCACLS *.TXT /G ADMINISTRATOR:RC /Y
XCACLS *.* /R ADMINISTRATOR /Y
XCACLS TEST.DLL /D ADMINISTRATOR /Y
XCACLS TEST.DLL /P ADMINISTRATOR:F /Y
XCACLS *.* /G ADMINISTRATOR:F;TRW /Y
XCACLS *.* /G ADMINISTRATOR:F;TXE /C /Y

-----Original Message-----
Would "cacls /t /g user:F" help?

By the way, any user with administrative privileges on the machine could
take ownership of the file and reset the permissions. Also, members of the
Backup Operators group can gain access to the file.

Oli
Click to expand...
 
alfalfa said:
hi,
use XCACLS
example:
xcacls folder /e /p specialuser:F

XCACLS filename [/T] [/E|/X] [/C] [/G user:perm;spec] [/R
user [...]]
[/P user:perm;spec [...]] [/D user [...]]
[/Y]
Click to expand...


So sad, so sad, XCACLS is not part of Windows XP :-(

Reinhardt
 
Back
Top