Export (0) Print
Expand All
Arp
At
Cd
Cls
Cmd
Del
Dir
Fc
For
Ftp
If
Ldp
Lpq
Lpr
Md
Mmc
Msg
Nlb
Rcp
Rd
Reg
Rem
Ren
Rsh
Rsm
Rss
Sc
Set
Sfc
Ver
Vol
Expand Minimize

Cacls

Updated: April 17, 2012

Applies To: Windows Server 2008, Windows Vista

Displays or modifies discretionary access control lists (DACL) on specified files.

cacls <filename> [/t] [/m] [/l] [/s[:sddl]] [/e] [/c] [/g user:<perm>] [/r user [...]] [/p user:<perm> [...]] [/d user [...]]

 

Parameter Description

<filename>

Required. Displays ACLs of specified files.

/t

Changes ACLs of specified files in the current directory and all subdirectories.

/m

Changes ACLs of volumes mounted to a directory.

/l

Work on the Symbolic Link itself versus the target.

/s:sddl

Replaces the ACLs with those specified in the SDDL string (not valid with /e, /g, /r, /p, or /d).

/e

Edit ACL instead of replacing it.

/c

Continue on access denied errors.

/g user:<perm>

Grant specified user access rights.

Valid values for permission:

 

Value Description

n

none

r

read

w

write

c

change (write)

f

full control

/r user [...]

Revoke specified user's access rights (only valid with /e).

[/p user:<perm> [...]

Replace specified user's access rights.

Valid values for permission:

 

Value Description

n

none

r

read

w

write

c

change (write)

f

full control

[/d user [...]

Deny specified user access.

/?

Displays help at the command prompt.

  • This command has been deprecated. Please use Icacls instead.

  • Use the following table to interpret the results:

     

    Output Access control entry (ACE) applies to

    OI

    Object inherit. This folder and files.

    CI

    Container inherit. This folder and subfolders.

    IO

    Inherit only. The ACE does not apply to the current file/directory.

    No output message

    This folder only.

    (OI)(CI)

    This folder, subfolders, and files.

    (OI)(CI)(IO)

    Subfolders and files only.

    (CI)(IO)

    Subfolders only.

    (OI)(IO)

    Files only.

  • You can use wildcards (? and *) to specify multiple files.

  • You can specify more than one user.

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft