CaclsDisplays or modifies discretionary access control list (DACL) files.
Syntax
cacls FileName [/t] [/e] [/c] [/g User: permission] [/r User [...]] [/p User: permission [...]] [/d User [...]] (Minus space between : and p)
Parameters
FileName
Required. Displays DACLs of specified files.
/t
Changes DACLs of specified files in the current directory and all subdirectories.
/e
Edits a DACL instead of replacing it.
/c
Continues to change DACLs, ignoring errors.
/g User: permission (Minus space between : and p)
Grants access rights to the specified user. The following table lists valid values for permission. Value Description
n None
r Read
w Write
c Change (Write)
f Full Control
/r User
Revokes access rights for the specified user.
/p User: permission (Minus space between : and p)
Replaces access rights for the specified user. The following table lists valid values for permission. Value Description
n None
r Read
w Write
c Change (Write)
f Full Control
/d User
Denies access for the specified user.
/?
Displays help at the command prompt.
Remarks
Use the following table to interpret the results. Output ACE applies to
OI This folder and files
CI This folder and subfolders
IO The ACE does not apply to the current file/directory.
No output message This folder only
(IO)(CI) This folder, subfolders and files
(OI)(CI)(IO) Subfolders and files only
(CI)(IO) Subfolders only
(OI)(IO) Files only
You can use wildcards (that is, ? and *) to specify multiple files.
You can specify more than one user.