Questions tagged [icacls]
The icacls tag has no usage guidance.
11
questions with no upvoted or accepted answers
2
votes
2
answers
2k
views
ICACLS in powershell script 50% working
I have an ICACLS command running within a powershell script. The script creates a new folder on a server share, creates a new security group in AD and then runs ICACLS to provision the folder. When I ...
1
vote
0
answers
178
views
How to save ACLs of a directory tree and then restore it on another server, as SID mapping is not guaranteed?
ICACLS can save ACL of a tree with the command below, where a_dir_root is the root of this tree:
icacls a_dir_root\ /save AclFile /T /C /Q
Of course, groups are identified as SIDs. I want to restore ...
1
vote
0
answers
185
views
ACL of Folders on Domain-joined Host for Local Account Holders
I have a domain-joined server, Windows Server 2012 R2 Standard, with a folder tree that is common to multiple users. Some users have domain accounts and some have only local Windows accounts. All ...
0
votes
1
answer
304
views
ICACLS escape asterisk character
Let's say I have managed to create a file named '*' (via MSYS or whatever)
Is there a way to properly escape this such that I can call ICACLS and only list that single file?
icacls * lists everything ...
0
votes
0
answers
488
views
Granting permission to domain user for folder not working
I'm converting my code to use icacls and currently following this tutorial: https://ss64.com/nt/icacls.html.
On this part,
Grant the user jdoe rights to create, edit and delete files in the
...
0
votes
1
answer
504
views
How do I properly order NTFS ACL using icacls?
I have a directory structure 4 subdirectories deep: [Department] -> [Job #] -> [Docs] -> [EMail]
At the [Docs] level I have 4 groups inherited from root and one group (st_JobDocs) explicit. All ...
0
votes
1
answer
92
views
Find permission of specific account and owner to replace with new account
Using Windows 2008R2.
I have an ad account "fileadm" which have some permissions of many folders and files and for some it's a owner.
I need to replace this account with another account (with the same ...
0
votes
1
answer
502
views
How do I provide read-only permission for a user on a Windows File Share?
I am trying to provide read-only permission to folder/sub-folders for particular users in windows NAS server with following scenarios:
if user already has some permission remove all of that.
provide ...
0
votes
1
answer
364
views
Access denied on single file with explicit permissions set
I have a Windows 2008R2 server that has a weird permissions issue. I have a single file in a share that has inheritance disabled and explicit permissions set on the file. The only groups that have ...
0
votes
0
answers
811
views
ICACLS not working from PowerShell
I created a BAT file that executes this
C:\Windows\system32\icacls.exe "F:\Users\username" /inheritance:r /T /C /Q
It works fine.
When I copy the command within a PowerShell, I get error ...
0
votes
1
answer
148
views
Create a kind of dropbox folder on Windows server so users can copy files in, but not delete or modify
Is there a way to set NTFS rights on a folder so that users are allowed to copy files into that folder and read them afterwards, but not delete or write to them (once they were closed at the end of ...