Questions tagged [icacls]
`icacls` is a command-line program shipped with Microsoft Windows. It is used to edit user permissions for files and directories.
63
questions
0
votes
0answers
32 views
How do I use ICACLS in Windows 10 to take control of a folder
I am trying to reload Adobe Acrobat on my notebook, however it states "account already exist". I then find there are still files in Windows (after uninstall), but I can't delete them due "Access ...
0
votes
0answers
34 views
Took ownership of system32 on Windows 7, cancelled a defrag, haven't been able to boot since
As I said in the title, I took ownership of System32 on my HP Elitebook 8560p laptop.
It's running Windows 7 and I use iObit Advanced System Care to scan and fix problems once a week.
I took ...
0
votes
0answers
73 views
Error with a folder security tab in Windows 10
On an external hard drive I have a folder which seems to have a problem.
When I use software on it I have some error message, the only program with can open this folder looks like to be the file ...
0
votes
1answer
107 views
icacls destroys win 10
I saved my Win7 System paratition to an external drive. Then formatted and installed Win10 instead of Win7.
Everything ok so far.
In order to get access to all the files on the saved folders I ...
0
votes
0answers
49 views
icacls.exe doesn't show that ACL was inherited (I)
I noticed different behaviour of icacls.exe on two machines with Windows 10:
Windows 10 Version 1809 (OS Build 17763.678)
> echo "test" > file
> icacls.exe file
file NT AUTHORITY\SYSTEM:(F)
...
0
votes
1answer
166 views
How to gain r/w permissions to files administrator does not have permissions to?
The problem occurred to me while trying to apply mods to a game installed via Windows Store in Windows 10 (xbox gamepass in particular).
The way installations work for this distribution method - ...
0
votes
1answer
65 views
Scrub away NTFS permissions on data files from previous installation of Windows
I recently did a clean installation of Windows 10 onto a new SSD, and restored my old data files onto the drive. The problem is, even though I told the backup program to NOT restore the permissions, ...
0
votes
1answer
3k views
PowerShell Set permissions on a folder/directory from the command line
Is there a better / easier way to set permissions on a Windows folder from the command line?
I am using powershell, get-acl and set-acl.
# Set permissions on a folder using powershell, get-acl and ...
-4
votes
1answer
411 views
Reset Windows 10 Permissions
I installed long time ago "Easy Context Menu" and added when I press right click, the option to "take ownership" from a folder/disk.
Also long time ago I had plugged in my old C:/ HDD from my old ...
0
votes
0answers
87 views
Granting permission to domain user not working
I'm converting my VBScript code to use icacls and currently following this tutorial: https://ss64.com/nt/icacls.html.
On this part,
Grant the user jdoe rights to create, edit and delete files in ...
3
votes
1answer
2k views
Understanding 'Access Denied' so that permissions can be reverted - icacls and takeown
Before taking ownership of files and folders I would like to understand how to view the current permissions so that they may be reverted.
I am reciving an 'Access Denied' message to view or save ...
0
votes
1answer
350 views
ICACLS Setowner to folders only
I need to give user_foo full control in all files and subdirectories in a \directory.
user_foo is the owner of the /directory.
user_foo has own some subdirectories but not all subdirectories.
icacls ...
0
votes
2answers
850 views
How do you set Windows file permissions/security options non-recursively?
I somehow botched up my C:\ (root folder) security settings on Windows 10. They remained botched even after an in-place reinstall and somewhat botched after a full (no-save) reinstall. Right now if I ...
0
votes
1answer
934 views
Denied permission to access external USB Drive [closed]
I've tried to recover a 14.5GB drive but I've run into some trouble. The drive is already formatted FAT32.
When inserting the drive when logged into my normal (Admin) user, I get an error saying i ...
0
votes
1answer
797 views
How do I remove a the Users group from everyone's user profile folder in Windows 7/2008?
I am forced to add a user who may only have access to one folder. Therefore, I need to remove the users and domain users permissions from all of my files. Right now, every users can see eachother's ...
1
vote
1answer
3k views
Icacls Grant all users access to a folder including new files?
I use the following command (in an admin batch file) to grant all users (specifically users on the network) full access to a folder and all its contents:
Icacls %fold% /grant Everyone:F /inheritance:...
0
votes
1answer
559 views
Granting IIS_IUSRS access to a Web Application folder
Trying to add a folder on D:\ as a virtual directory to a Web Site in IIS.
"Obviously" I need to add an ACL to the folder for the security principal IIS uses.
This appears, most of the time, to be ...
1
vote
1answer
432 views
icacls - Integrity level is not apply on the exe file
I have an exe file that run as Medium integrity by default. I tried to change its integrity to Low with the following statament :
icacls 1.exe /L
The output message show its succeed :
1.exe ...
0
votes
0answers
124 views
How to reset user permissions on system files and registry keys to the state when Windows was installed?
I currently have Windows 10 Pro version 1803 (build 17134.254) installed.
Thing is, I did some stuff to user permissions on some files and registry keys and I believe I might have also affected some ...
0
votes
1answer
417 views
Is there a way to change the 'Advanced Permissions' of a file in Windows using command line?
So just to clarify: I would like to remove the advanced permission called "Change permissions" because even if you remove permissions from a group (in this case administrators) using icacls, while no ...
0
votes
2answers
2k views
Setting a file to “Read-Only” in Windows with ICACLS
I knew how to set a file Read-Only with cacls:
cacls "toto.txt" //E //P Everyone:N
cacls "toto.txt" //E //G Everyone:R
It removed all rights for everyone and then only added "Read" right.
How ...
0
votes
1answer
55 views
How can I use Icalcs to grant access to a specific machine on the network?
In a Batch File I want to use Icacls to grant access to either all users (preferable) or a specific user on a remote machine. Currently, if I grant access to the user Joe, any machine on the network ...
0
votes
1answer
149 views
icacls - Invalid parameter error
With Server 2008 R2, I'm using the following command and it works well:
icacls “D:\wamp\apache” /grant “run_apache”:(OI)(CI)RX /T
However, using
icacls “D:\wamp\apache\logs” /grant “run_apache”:(OI)...
2
votes
0answers
656 views
How to get the equivalent of chmod 600 using icacls on Windows? [duplicate]
I'm looking for a way to achieve the equivalent of chmod 600 on Windows using the icacls utility. For the user part I got the rw permission by using icacls file /inheritance:r /grant:r %USERNAME%:(R,W)...
0
votes
1answer
305 views
Granting windows service file access
I'm attempting to run a connection with openssh by using a service. Unfortunately, openssh requires that the authentication key is readable only by the one user who intends to well..use it (If there's ...
1
vote
1answer
5k views
Why can't I remove a group with icacls from a file after revoking read access?
Why can't I remove a group from a file if it is being denied read permission even though I have read permission from my account, am part of the Administrators group, and I'm running icacls from an ...
2
votes
1answer
1k views
How to use takeown and icacls to deny access to other users?
What is the Windows equivalent to:
chown $USER
chmod 600 file
From what I understand, this requires that inherited permissions be disabled (because HOSTNAME\Users is inherited) and all groups ...
2
votes
1answer
520 views
Why do I get a privilege error when running “takeown” from the command line?
I am part of the Administrators group. I have a file which I can change ownership from myself to HOSTNAME\Administrators and back just fine using the Security tab in the file properties.
I can also ...
0
votes
1answer
825 views
Files can still be modified even after setting ''Read-only'' permission by ICACLS. Why is it not working?
I am the administrator in my PC and there are some other users on it. I set a folder (Gabi) as "Read only" for a specific user (Alice), using ICACLS via the Command Prompt (I am using windows 7 in ...
0
votes
0answers
55 views
Set Read Permissions to logged in AD User
i would like to set Read Only Permissions to a folder i created with a startup script:
md D:\Projects\%USERNAME%
Only the logged in AD User should have Read Permissions on this Folder.
I tried it ...
1
vote
1answer
5k views
Replace folder permissions with icacls
I want to replace a folder's permissions. First I did this:
icacls folder /grant user:(oi)(ci)f
Then I want to change the permissions and the inheritance to:
icacls folder /grant:r user:(oi)(io)rx
...
2
votes
1answer
365 views
Run batch with icacls as scheduled task
I a batch file that fix permissions in ALL the Tree of a docomentum storage.
it sits in a UNC operation directory.
goSetPriv.bat
@echo off
set /a _cnt=0
set _docdir="UNC_DCTM_PATH_TO_SCAN\*"
if (%...
0
votes
0answers
515 views
How do I stop a systemic “Error 1310. Error writing to file: C:\Config.Msi\*rbf.”?
Whenever I try to install or uninstall an MSI program on my parents' computer, it fails with the message, "Error 1310. Error writing to file: C:\Config.Msi*rbf. Verify that you have access to that ...
1
vote
0answers
74 views
Find folder without permission inheritance
How can I recursively find which folder doesn't have permission inheritace enabled?
9
votes
3answers
6k views
Regardless of Windows language, how can I make the ICACLS command set a folder to have full access to everyone?
Background
Say I have this command
icacls C:\FullyAccessibleFolder /grant Users:(OI)(CI)F
This works fine in English versions of Windows, but does not seem to work in French versions, giving the ...
2
votes
1answer
974 views
How to transfer Full Control ACL to named administrator account from CMD prompt?
Trying to give my named Administrator account (the account I use to log in to Windows) Full Control ACL permission across ALL files and folders.
What is the command line to do this and/or could ...
0
votes
0answers
202 views
How to get deletion rights for old Windows folder in cmd [duplicate]
I have an old Windows installation on a secondary HDD and I can't format it because there's data on it.
I therefore want to delete E:\Windows but haven't got sufficient rights.
So I first took ...
1
vote
1answer
1k views
Windows admin shares allowing unwanted access for all domain users
My Problem
I have a problem with shares on my Windows 2008 R2 server:
All shares including administrative shares such as c$ allow all users the permission to create files and folders.
My Attempted ...
0
votes
1answer
1k views
CMD with icacls issue for windows 10 upgrade - invalid parameters
I'm trying to upgrade my laptop to windows 10 but it says my system reserved partition is low on available size so i'm following microsoft solution on the internet and somehow got stuck with these ...
13
votes
1answer
79k views
Command line to permanently get access to folder
UPDATE
While I was able to use the method described in accepted answer once it failed a second time or was just giving too much trouble.
Searching further I found SetACL by Helge Klein which is far ...
10
votes
1answer
5k views
Cygwin mkdir makes directory I don't have permissions to
Using latest version of cygwin64 in Windows 10. I have managed to get a directory foo that has something strange about its permissions. I'm not quite sure how this happened but here are the symptoms:
...
0
votes
0answers
174 views
Disable Narrator.exe in windows 8 and above
The Narrator is one annoying windows feature and i wanted to get rid of it.
So i decided to change the file permissions. I took ownership of the Narrator.exe which was located in the Windows System ...
1
vote
2answers
1k views
What does IC in ICACLS stand for?
The command-line program to modify user permissions for files in Windows is called icacls, where ACL is for access control list, and i'm guessing the S indicates plural. What does IC stand for?
2
votes
1answer
852 views
Create List of Access Denied Files & Folders
I want to make a list of access denied files/folders for a given account. I'm aware "icacls" handles making lists of files/folders given an account name.
e.g. This command lists access denied per ...
0
votes
1answer
914 views
Setting NTFS permissions to share root breaks inheritance
I'm having an issue with Windows 2012 R2 where setting NTFS permissions on the root of a share breaks inheritance, and the NTFS permissions are effectively replaced with the new ACE. The only way I ...
2
votes
1answer
520 views
Batch file using icacls not executing
I'm reading the users from a file and I try to grant them access to a specific folder, but when I execute the batch file below nothing happens. Can someone please explain me what is wrong?
Edit: I'm ...
0
votes
0answers
8k views
Permissions inheritance problems with Windows 10
Since upgrading to Windows 10, I have moved over my hard drive from Windows 8.1 which contained my Users folder. I have previously made migrations like this with no issues, but this time, I'm getting ...
0
votes
2answers
7k views
Changing Folder Permissions in vbscript
I have a vbscript that will create a folder, but I need the User to have Full Permissions. I have put my code below. (Windows 8 system)
FSO.CreateFolder(lclFolder)
oWS.exec "icacls " & lclFolder ...
1
vote
1answer
2k views
Remove inherited permissions with SetACL
I'm using SetACL as an alternative to icacls to process objects' DACL SACL and ownership.
After reading the documentation, I see that the clear parameter clears the ACL of any non-inherited ACEs, ...
0
votes
2answers
8k views
Setting Deny Permissions with ICACLS on “This Folder”
ICACLS "{PATH}" /DENY "{AD Group}:(D)"
I want to deny the ability for {AD Group} to delete the parent folder but still have permissions to delete child folder and files. However, when I set the DENY ...
