Cacls
Microsoft Windows and ReactOS native command line utility
From Wikipedia, the free encyclopedia
In Microsoft Windows, cacls, and its replacement icacls, are native command-line utilities that can display and modify the security descriptors on files and folders.[1][2] An access-control list is a list of permissions for securable object, such as a file or folder, that controls who can access it. The cacls command is also available on ReactOS.
cacls
| cacls | |
|---|---|
The ReactOS cacls command | |
| Developers | Microsoft, Thomas Weidenmueller |
| Initial release | 1994, 31–32 years ago |
| Operating system | Microsoft Windows, ReactOS |
| Type | Command |
| License | Windows: Proprietary commercial software ReactOS: GNU Lesser General Public License |
| Website | docs |
The cacls.exe utility is a deprecated command line editor of directory and file security descriptors in Windows NT 3.5 and later operating systems of the Windows NT family.[3] Microsoft has produced the following newer utilities, some also subsequently deprecated, that offer enhancements to support changes introduced with version 3.0 of the NTFS filesystem:
- xcacls.exe[4][5][6][7] is supported by Windows 2000 and later and adds new features like setting Execute, Delete and Take Ownership permissions
- xcacls.vbs[8][9]
- fileacl.exe [10]
- icacls.exe (included in Windows Server 2003 SP2 and later)[11][12]
- SubInAcl.exe - Resource Kit utility to set and replace permissions on various type of objects including files, services and registry keys
- Windows PowerShell (Get-Acl[13] and Set-Acl[14] cmdlets)
The ReactOS version was developed by Thomas Weidenmueller and is licensed under the GNU Lesser General Public License.[15]
icacls
| icacls | |
|---|---|
| Developer | Microsoft |
| Initial release | 2007, 18–19 years ago |
| Operating system | Microsoft Windows |
| Type | Command |
| License | Proprietary commercial software |
| Website | docs |
Stands for Integrity Control Access Control List.[citation needed] Windows Server 2003 Service Pack 2 and later include icacls, an in-box command-line utility that can display, modify, backup and restore ACLs for files and folders, as well as to set integrity levels and ownership in Vista and later versions.[16] It is not a complete replacement for cacls, however. For example, it does not support Security Descriptor Definition Language (SDDL) syntax directly via command line parameters (only via the /restore option).