Edit

Share via

cacls

Important

This command has been deprecated. Please use icacls instead.

Displays or modifies discretionary access control lists (DACL) on specified files.

Syntax

cacls <filename> [/t] [/m] [/l] [/s[:sddl]] [/e] [/c] [/g user:<perm>] [/r user [...]] [/p user:<perm> [...]] [/d user [...]]

Parameters

Parameter Description
<filename> Required. Displays ACLs of specified files.
/t Changes ACLs of specified files in the current directory and all subdirectories.
/m Changes ACLs of volumes mounted to a directory.
/l Works on the Symbolic Link itself instead of the target.
/s:sddl Replaces the ACLs with those specified in the SDDL string. This parameter is not valid for use with the /e, /g, /r, /p, or /d parameters.
/e Edit an ACL instead of replacing it.
/c Continue after access denied errors.
/g user:<perm> Grants specified user access rights, including these valid values for permission:
  • n - None
  • r - Read
  • w - Write
  • c - Change (write)
  • f - Full control
/r user [...] Revoke specified user's access rights. Only valid when used with the /e parameter.
[/p user:<perm> [...] Replace specified user's access rights, including these valid values for permission:
  • n - None
  • r - Read
  • w - Write
  • c - Change (write)
  • f - Full control
[/d user [...] Deny specified user access.
/? Displays help at the command prompt.

Sample output

Output Access control entry (ACE) applies to
OI Object inherit. This folder and files.
CI Container inherit. This folder and subfolders.
IO Inherit only. The ACE does not apply to the current file/directory.
No output message This folder only.
(OI)(CI) This folder, subfolders, and files.
(OI)(CI)(IO) Subfolders and files only.
(CI)(IO) Subfolders only.
(OI)(IO) Files only.

Remarks

  • You can use wildcards (? and *) to specify multiple files.

  • You can specify more than one user.