Utility to check Windows NTFS ACL/ACE dependency integrity

Question

I'm having issues with imaging a NTFS filesystem where the ACL/ACE of a file has invalid ACL/ACE dependencies. chkdsk does not detect or fix the problem. Is there a tool available to detect (fixing is optional but preferred) such issues?

Answer 1

The icacls.exe utility has a /verify switch that checks for issues with your ACLs. The two things it checks are that the ACL is in "canonical form" and that the ACL length is consistent with the ACE count. I'm assuming the "canonical form" check would catch your problem.

It won't automatically repair as far as I know, but you might be able to do some scripting to save the broken filenames off to a file, then re-run icacls against them to repair.

icacls ships with 2003SP2+ by the way.

icacls reference