Questions tagged [icacls]

The tag has no usage guidance.

11 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2 votes
2 answers
2k views

ICACLS in powershell script 50% working

I have an ICACLS command running within a powershell script. The script creates a new folder on a server share, creates a new security group in AD and then runs ICACLS to provision the folder. When I ...
Sid's user avatar
  • 21
1 vote
0 answers
178 views

How to save ACLs of a directory tree and then restore it on another server, as SID mapping is not guaranteed?

ICACLS can save ACL of a tree with the command below, where a_dir_root is the root of this tree: icacls a_dir_root\ /save AclFile /T /C /Q Of course, groups are identified as SIDs. I want to restore ...
Amessihel's user avatar
  • 113
1 vote
0 answers
185 views

ACL of Folders on Domain-joined Host for Local Account Holders

I have a domain-joined server, Windows Server 2012 R2 Standard, with a folder tree that is common to multiple users. Some users have domain accounts and some have only local Windows accounts. All ...
boynoid's user avatar
  • 11
0 votes
1 answer
304 views

ICACLS escape asterisk character

Let's say I have managed to create a file named '*' (via MSYS or whatever) Is there a way to properly escape this such that I can call ICACLS and only list that single file? icacls * lists everything ...
LordAro's user avatar
  • 121
0 votes
0 answers
488 views

Granting permission to domain user for folder not working

I'm converting my code to use icacls and currently following this tutorial: https://ss64.com/nt/icacls.html. On this part, Grant the user jdoe rights to create, edit and delete files in the ...
rminaj's user avatar
  • 121
0 votes
1 answer
504 views

How do I properly order NTFS ACL using icacls?

I have a directory structure 4 subdirectories deep: [Department] -> [Job #] -> [Docs] -> [EMail] At the [Docs] level I have 4 groups inherited from root and one group (st_JobDocs) explicit. All ...
Albion's user avatar
  • 465
0 votes
1 answer
92 views

Find permission of specific account and owner to replace with new account

Using Windows 2008R2. I have an ad account "fileadm" which have some permissions of many folders and files and for some it's a owner. I need to replace this account with another account (with the same ...
puffydee's user avatar
0 votes
1 answer
502 views

How do I provide read-only permission for a user on a Windows File Share?

I am trying to provide read-only permission to folder/sub-folders for particular users in windows NAS server with following scenarios: if user already has some permission remove all of that. provide ...
Hitesh Kumar's user avatar
0 votes
1 answer
364 views

Access denied on single file with explicit permissions set

I have a Windows 2008R2 server that has a weird permissions issue. I have a single file in a share that has inheritance disabled and explicit permissions set on the file. The only groups that have ...
eljasbo's user avatar
0 votes
0 answers
811 views

ICACLS not working from PowerShell

I created a BAT file that executes this C:\Windows\system32\icacls.exe "F:\Users\username" /inheritance:r /T /C /Q It works fine. When I copy the command within a PowerShell, I get error ...
GettingStarted's user avatar
0 votes
1 answer
148 views

Create a kind of dropbox folder on Windows server so users can copy files in, but not delete or modify

Is there a way to set NTFS rights on a folder so that users are allowed to copy files into that folder and read them afterwards, but not delete or write to them (once they were closed at the end of ...
Thomas's user avatar
  • 111