dos command that modify folder and file permission in windows

Tagged:  

NOTE: Cacls is going to deprecated since windows vista,2008. please use Icacls instead.

Cacls is a windows command. its a usefull tool for change folder and file permission. also modify group permission, equivalent to the chmod command in unix/linux。
i usually use it with in a script to change folder permission on client computer.

Although it is a command line based tool that somewhat cumbersome to use, but it is very usefull in setting permission to bunch of computers and folders.

How to use:
type CACLS /? in the command windows for help information.
Displays or modifies access control lists (ACLs) of files

CACLS filename [/T] [/M] [/L] [/S[:SDDL]] [/E] [/C] [/G user:perm]
[/R user [...]] [/P user:perm [...]] [/D user [...]]
filename Displays ACLs.
/T Changes ACLs of specified files in
the current directory and all subdirectories.
/L Work on the Symbolic Link itself versus the target
/M Changes ACLs of volumes mounted to a directory
/S Displays the SDDL string for the DACL.
/S:SDDL Replaces the ACLs with those specified in the SDDL string
(not valid with /E, /G, /R, /P, or /D).
/E Edit ACL instead of replacing it.
/C Continue on access denied errors.
/G user:perm Grant specified user access rights.
Perm can be: R Read
W Write
C Change (write)
F Full control
/R user Revoke specified user's access rights (only valid with /E).
/P user:perm Replace specified user's access rights.
Perm can be: N None
R Read
W Write
C Change (write)
F Full control
/D user Deny specified user access.