Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm having issues with imaging a NTFS filesystem where the ACL/ACE of a file has invalid ACL/ACE dependencies. chkdsk does not detect or fix the problem. Is there a tool available to detect (fixing is optional but preferred) such issues?

share|improve this question
up vote 1 down vote accepted

The icacls.exe utility has a /verify switch that checks for issues with your ACLs. The two things it checks are that the ACL is in "canonical form" and that the ACL length is consistent with the ACE count. I'm assuming the "canonical form" check would catch your problem.

It won't automatically repair as far as I know, but you might be able to do some scripting to save the broken filenames off to a file, then re-run icacls against them to repair.

icacls ships with 2003SP2+ by the way.

icacls reference

share|improve this answer
I'll try this tonight and see if it picks up the issue. Thank you. – Chris S Nov 23 '10 at 16:54

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.