For example,
if you want to determine who has access to the root directory of the C drive, you??™d type ICACLS C:\
and press Enter. The results appear as shown in Figure 3.3.
The letters beside each of the entries tells you which rights the specified user or group has to the
file or directory. For example, the letter F denotes full access, while M denotes modify access. Chapter
15 describes all of these security indicators in detail. When an entry has more than one letter
after it, that entry has all of those rights. To grant access to a particular user or group, you use the
grant syntax for the ICACLS command. For example, to grant user John full access to the C:\Users
directory, you??™d type ICACLS C:\Users /Grant John:(F) and press Enter. If the system can??™t
allow access due to User Access Control (UAC) or other reasons, then you??™ll see an Access Denied
error message. Otherwise, you??™ll see a Successfully Processed message, along with the number of
entries that the command has processed.
Figure 3.3
Determine who has
access to a particular
file or directory as part
of creating a share
for it.
It??™s important to set security policies for the server.
Pages:
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173