cacls
Updated: January 21, 2005
Displays or modifies discretionary access control lists (DACL)
on specified files.
Syntax
caclsFileName [/t] [/e [/rUser
[...]]] [/c] [/gUser:Permission ] [/pUser:Permission
[...]] [/dUser [...]]
Parameters
FileName
Required. Displays DACLs of specified files.
/t
Changes DACLs of specified files in the current
directory and all subdirectories.
/e
Edits a DACL instead of replacing it.
/r User
Revokes access rights for the specified user, is not
valid without /e.
/c
Continues to change DACLs, ignoring errors.
/g User:Permission
Grants access rights to the specified user. The
following table lists valid values for Permission.
ValueDescriptionn Noner Readw
Writec Change (Write)fFull Control
/p User:Permission
Replaces access rights for the specified user. The
following table lists valid values for Permission.
ValueDescriptionnNonerReadwWritecChange
(Write)fFull Control
/d User
Denies access for the specified user.
/?
Displays help at the command prompt.
Remarks
- Use the following table to interpret the results
| Output | ACE applies to |
| OI | This folder and files. |
| CI | This folder and subfolders. |
| IO | The ACE does not apply to the current file/directory. |
| No output message | This folder only. |
| (OI)(CI) | This folder, subfolders, and files. |
| (OI)(CI)(IO) | Subfolders and files only. |
| (CI)(IO) | Subfolders only. |
| (OI)(IO) | Files only. |
-
You can use wildcards (that is, ? and *) to specify multiple files.
-
You can specify more than one user.
Formatting legend
| Format | Meaning |
| Italic | Information that the user must supply |
| Bold | Elements that the user must type exactly as shown |
| Ellipsis (...) | Parameter that can be repeated several times in a command line |
| Between brackets ([]) | Optional items |
| Between braces ({}); choices separated by pipe (|). Example: {even|odd} | Set of choices from which the user must choose only one |
| Courier font | Code or program output |