Tuesday, August 13, 2013

Windows permission : icacls

http://www.cyberciti.biz/tips/windows-change-access-permissions-from-the-command-line.html
http://technet.microsoft.com/en-us/library/cc753525.aspx
http://windowsitpro.com/security/icacls-new-and-improved-cacls

c:\rftest>cacls test
c:\rftest\test BUILTIN\Administrators:(ID)F
               BUILTIN\Administrators:(OI)(CI)(IO)(ID)F
               NT AUTHORITY\SYSTEM:(ID)F
               NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(ID)F
               BUILTIN\Users:(OI)(CI)(ID)R
               NT AUTHORITY\Authenticated Users:(ID)C
               NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(ID)C


c:\rftest>icacls test
test BUILTIN\Administrators:(I)(F)
     BUILTIN\Administrators:(I)(OI)(CI)(IO)(F)
     NT AUTHORITY\SYSTEM:(I)(F)
     NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F)
     BUILTIN\Users:(I)(OI)(CI)(RX)
     NT AUTHORITY\Authenticated Users:(I)(M)
     NT AUTHORITY\Authenticated Users:(I)(OI)(CI)(IO)(M)

Successfully processed 1 files; Failed processing 0 files


icacls test /inheritance:d
icacls test /remove:g Users
icacls test /remove:g "Authenticated Users"
icacls test /grant:r Users:rx
icalcs test /grant:r Users:m

[Note] a sequence of simple rights: n/f/m/rx/r/w/d

No comments:

Related Posts Plugin for WordPress, Blogger...