I want to download the file subinacl.exe

Question

I want to download the file subinacl.exe

Clifford Andrews 0

I want to download the file subinacl.exe for Windows 11 to update my default security on my laptop.

2 answers

Your answer

Answer 1

Castorix31 90,686

This link and .exe inside .msi from MS archives works on my Windows 10 22H2 OS, I don't know for Windows 11 :

https://web.archive.org/web/20200803210208/http://download.microsoft.com/download/1/7/d/17d82b72-bc6a-4dc8-bfaa-98b37b22b367/subinacl.msi

Clifford Andrews 0 Reputation points

2024-10-16T06:19:42.9933333+00:00

Thanks for the feedback Castorix31 - but I will need the windows 11 version (if there is one)
Castorix31 90,686 Reputation points

2024-10-16T09:55:50.3666667+00:00

There is no verison specific to OS x or Y

This is the last version (5.2.3790.1180)

Answer 2

Anonymous

Hello Clifford Andrews,

Thank you for posting in Q&A forum.

It seems the original SubInACL download is no longer available, you can try to use alternative tools to manage permissions on Windows 11.

ICACLS Command:

• This built-in Windows command allows you to view, modify, and reset file system permissions.

• Example usage:

• icacls * /t /q /c /reset

• This command resets all user permissions to default for every folder, subfolder, and file within the current working directory

Secedit Command:

• Another built-in Windows command to configure and analyze system security.

• Example usage:

• secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose

• This command resets user permissions to the default system settings

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Clifford Andrews 0 Reputation points

2024-10-16T10:12:49.1366667+00:00

Thank you for your feedback, Daisy Zhou. Can you confirm that either one of these 2 commands (If I run them at the root C: Prompt) will go down into each folder (not only system folders), and apply the default security?

MotoX80 36,416

and apply the default security?

I would recommend that you explain the real problem that you are trying to fix.

The NTFS permissions on the C: drive are very complex and there is no way that icacls.exe can reset the default permissions without first running an analysis and building the series of icacls commands to rebuild security.

For example, on my Win11 laptop I see these permissions on the root of C:.

PS C:\> icacls c:\
c:\ S-1-15-3-65536-1888954469-739942743-1668119174-2468466756-4239452838-1296943325-355587736-700089176:(S,RD,X,RA)
    BUILTIN\Administrators:(OI)(CI)(F)
    NT AUTHORITY\SYSTEM:(OI)(CI)(F)
    BUILTIN\Users:(OI)(CI)(RX)
    NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(M)
    NT AUTHORITY\Authenticated Users:(AD)
    Mandatory Label\High Mandatory Level:(OI)(NP)(IO)(NW)
Successfully processed 1 files; Failed processing 0 files

And on the Windows folder I see that some permissions were inherited from the C: drive, but other have been added. The "OI" and "CI" reflect inheritance. Some of the ACL's like "application package" apply only to the Windows folder while others get inherited by subfolders and files.

PS C:\> icacls C:\Windows\
C:\Windows\ NT SERVICE\TrustedInstaller:(F)
            NT SERVICE\TrustedInstaller:(CI)(IO)(F)
            NT AUTHORITY\SYSTEM:(M)
            NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
            BUILTIN\Administrators:(M)
            BUILTIN\Administrators:(OI)(CI)(IO)(F)
            BUILTIN\Users:(RX)
            BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
            CREATOR OWNER:(OI)(CI)(IO)(F)
            APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(RX)
            APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(OI)(CI)(IO)(GR,GE)
            APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(RX)
            APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(OI)(CI)(IO)(GR,GE)
Successfully processed 1 files; Failed processing 0 files

You can't just start with the root of C: and push permissions down to the entire drive. There are hundreds of folders with unique permissions.

Again, forget about the subinacl/icacls questions and explain what happened, what's wrong, and what you are trying to fix.

If you already tried to push permissions from C: down to subfolders and that's your problem, then you may have to reinstall Windows to get the base permissions restored.

Share via

I want to download the file subinacl.exe

2 answers

Your answer