Video Screencast Help
Endpoint Management Community Blog

Script NTFS Permissions Using SetACL

Created: 29 Aug 2008 • 3 comments
CondorMan's picture
+2 2 Votes
Login to vote

If you ever need to script NTFS permission changes, SetACL is a powerful alternative to CACLS. Here is a command line that will use SetACL to grant full control to the Administrators and System accounts on folder and all subfolders:

SetACL.exe -on "C:\Program Files" -ot file -actn ace -ace "n:administrators;p:full" -ace "n:system;p:full" -actn clear -clr "dacl,sacl" -actn rstchldrn -rst "dacl,sacl"

Comments 3 CommentsJump to latest comment

sm4rt's picture

Is there an advantage in using SetACL over CACLS?

-2
Login to vote
Brandon's picture

SetACL has more options and can do some of the tricky things cacls cannot. I prefer it for its speed advantage as well.

-2
Login to vote
CondorMan's picture

In my experience CACLS hasn't been as reliable as SetACL.

+2
Login to vote