2 shows typical output from this command. The
/Grant command line switch explains the meanings of the letters after each user or group entry.
Notice that some entries appear twice. For example, the Administrators group has modify
access (M) in the first entry and object inherit (OI), container inherit (CI), inherit only (IO), full
(F) access rights in the second. The first entry shows the Administrators group rights to the current
folder, while the second shows the Administrators group rights to subfolders and files.
Figure 15.2
Supplying only a
filename or directory
displays the DACL
for that filename or
directory.
/Save Stores all of the ACLs for the matching names into an ACL file for later use with the
/Restore option. For example, if you type ICACLs C:\ /Save MyAcls.TXT and press Enter,
you??™ll save all of the DACLs for the root directory of the C drive to a file named MyAcls.TXT.
ACLFile Provides the name of a file used to store all of the ACLs.
CHANGING FILE AND DIRECTORY ACCESS WITH THE ICACLS COMMAND 409
/T Changes the ACLs of the specified files or directories in the current directory and all subdirectories.
/C Ignores access denied errors by moving to the next file or next action.
Pages:
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973