Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have two directory trees that are supposedly copies of each other. I need to compare not the contents of files but the permissions on them. Is there a tool that will compare two dir trees but compare the ACLs on files and directories, not the file contents themselves? I am on Windows Server.

share|improve this question
up vote 1 down vote accepted

This tool may be your best bet

share|improve this answer
Thanks. I think that tool is a building block for what I'm looking for but it doesn't do the compare between two items and output the diffs. – DaveBurns Dec 9 '10 at 21:22
Use xcacls as @cpgascho suggested but send the output to dir1.txt and dir2.txt. Then use winmerge to compare the two text files. – sdanelson Dec 10 '10 at 2:07
yes winmerge is a great tool for doing the diff – cpgascho Dec 10 '10 at 15:03
Not sure how to score this for props. The best answer is @sdanelson 's above. I ran xcacls on the two trees and then diff'ed output with any diff tool (could be winmerge, could anything else). Thanks! – DaveBurns Feb 5 '11 at 15:32

Try to use:

icacls C:\Folder1 /save Folder1_ACL.txt /T
icacls C:\Folder2 /save Folder2_ACL.txt /T

And than put the two output files into a diff software like WinMerge or KDiff. With Windows tools you can run

fc Folder1_ACL.txt Folder2_ACL.txt

You will see the difference acl difference between the two folders.

share|improve this answer
This stores the ACLs in binary format. Use a text format instead. – leeand00 Apr 16 '15 at 18:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.