cacls
{{Short description|Microsoft Windows and ReactOS native command line utility}}
{{lowercase}}
{{not to be confused with|calc.exe}}
In Microsoft Windows, cacls, and its replacement icacls, are native command-line utilities that can display and modify the security descriptors on files and folders.{{cite web |title=Microsoft DOS cacls command |url=http://www.computerhope.com/cacls.htm |publisher=Computer Hope |access-date=24 December 2011}}{{cite web |title=CACLS.exe |url=https://ss64.com/nt/cacls.html |publisher=SS64.com |access-date=24 December 2011}} An access-control list is a list of permissions for securable object, such as a file or folder, that controls who can access it. The cacls command is also available on ReactOS.
cacls
{{Infobox software
| name = cacls
| logo =
| screenshot = ReactOS-0.4.13 cacls command 667x674.png
| screenshot size =
| caption = The ReactOS cacls command
| developer = Microsoft, Thomas Weidenmueller
| released = {{Release year|df=yes|1994}}
| latest release version =
| latest release date =
| operating system = Microsoft Windows, ReactOS
| genre = Command
| license = Windows: Proprietary commercial software
ReactOS: GNU Lesser General Public License
| website = {{URL|https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/cacls}}
}}
The cacls.exe utility is a deprecated command line editor of directory and file security descriptors in Windows NT 3.5 and later operating systems of the Windows NT family.{{Cite web|url=https://www.computerhope.com/cacls.htm|title = MS-DOS and Windows command line calcs command}} Microsoft has produced the following newer utilities, some also subsequently deprecated, that offer enhancements to support changes introduced with version 3.0 of the NTFS filesystem:
- xcacls.exe{{cite web|title=How to use Xcacls.exe to modify NTFS permissions (Revision: 4.5)|url=http://support.microsoft.com/kb/318754|work=Microsoft Support|publisher=Microsoft Corporation|access-date=24 December 2011|date=2 March 2007}}{{cite web|title=Xcacls syntax|url=https://technet.microsoft.com/en-us/library/cc781299.aspx|work=Microsoft TechNet|publisher=Microsoft Corporation|access-date=30 October 2012|date=28 March 2003}}{{cite web|title=Windows 2000 Resource Kit Tool: Xcacls.exe|url=http://www.microsoft.com/download/en/details.aspx?id=11096|work=Microsoft Download Center|publisher=Microsoft Corporation|access-date=24 December 2011|date=15 May 2002}}{{cite web|title=Windows XP Service Pack 2 Support Tools|url=http://www.microsoft.com/download/en/details.aspx?id=18546|work=Microsoft Download Center|publisher=Microsoft Corporation|access-date=24 December 2011|date=10 August 2004}} is supported by Windows 2000 and later and adds new features like setting Execute, Delete and Take Ownership permissions
- xcacls.vbs{{cite web|title=How to use Xcacls.vbs to modify NTFS permissions (Revision: 2.4)|url=http://support.microsoft.com/kb/825751|work=Microsoft Support|publisher=Microsoft Corporation|access-date=24 December 2011|date=30 October 2006}}{{cite web|title=Extended Change Access Control List Tool (Xcacls)|url=http://www.microsoft.com/download/en/details.aspx?id=19419|work=Microsoft Download Center|publisher=Microsoft Corporation|access-date=24 December 2011|format=2 July 2004|quote=Xcacls.vbs is an unsupported tool that provides additional capabilities not provided with the supported utility, Xcacls.exe.}}
- fileacl.exe {{cite web|url=http://www.microsoft.com/downloads/details.aspx?FamilyID=723f64ea-34f0-4e6d-9a72-004d35de4e64&displaylang=en |title=FILEACL v3.0.1.6 |publisher=Microsoft |date=2004-03-23 |url-status=dead |archive-url=https://web.archive.org/web/20090322021106/http://www.microsoft.com/downloads/details.aspx?FamilyID=723f64ea-34f0-4e6d-9a72-004d35de4e64&displaylang=en |archive-date=March 22, 2009 }}
- icacls.exe (included in Windows Server 2003 SP2 and later){{cite web|title=The Icacls.exe utility is available for Windows Server 2003 with Service Pack 2 (Revision: 4.0)|url=http://support.microsoft.com/kb/919240|work=Microsoft Support|publisher=Microsoft Corporation|access-date=24 December 2011|date=9 October 2011}}{{cite web|title=Icacls|url=https://technet.microsoft.com/en-us/library/cc753525%28WS.10%29.aspx|work=Microsoft TechNet|publisher=Microsoft Corporation|access-date=24 December 2011|date=28 September 2007}}
- SubInAcl.exe - Resource Kit utility to set and replace permissions on various type of objects including files, services and registry keys
- Windows PowerShell (Get-Acl{{cite web|title=Get-Acl|url=https://technet.microsoft.com/en-us/library/dd347635.aspx|work=Microsoft TechNet|publisher=Microsoft Corporation|access-date=31 October 2012|date=21 April 2010}} and Set-Acl{{cite web|title=Set-Acl|url=https://technet.microsoft.com/en-us/library/dd315261.aspx|work=Microsoft TechNet|publisher=Microsoft Corporation|access-date=31 October 2012|date=21 April 2010}} cmdlets)
The ReactOS version was developed by Thomas Weidenmueller and is licensed under the GNU Lesser General Public License.{{GitHub|https://github.com/reactos/reactos/blob/master/base/applications/cacls/cacls.c}}
icacls
{{Infobox software
| name = icacls
| logo =
| screenshot =
| screenshot size =
| caption =
| developer = Microsoft
| released = {{Release year|df=yes|2007}}
| latest release version =
| latest release date =
| operating system = Microsoft Windows
| genre = Command
| license = Proprietary commercial software
| website = {{URL|https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls}}
}}
Stands for Integrity Control Access Control List.{{Citation needed|date=July 2022}} Windows Server 2003 Service Pack 2 and later include icacls, an in-box command-line utility that can display, modify, backup and restore ACLs for files and folders, as well as to set integrity levels and ownership in Vista and later versions.[https://www.computerhope.com/icacls.htm MS-DOS and Windows command line icacls command] It is not a complete replacement for cacls, however. For example, it does not support Security Descriptor Definition Language (SDDL) syntax directly via command line parameters (only via the /restore option).
See also
References
{{Reflist}}
Further reading
{{Refbegin}}
- {{cite web|title=Cacls|url=http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/cacls.mspx?mfr=true|work=Microsoft Windows XP Professional Product Documentation|publisher=Microsoft Corporation|access-date=24 December 2011}}
- {{cite web|title=Xcacls Overview|url=https://technet.microsoft.com/en-us/library/cc758217%28WS.10%29.aspx|work=Microsoft TechNet|publisher=Microsoft Corporation|access-date=24 December 2011|date=28 March 2003}}
- {{cite web|title=DACLs and ACEs|url=http://msdn.microsoft.com/en-us/library/aa446597%28VS.85%29.aspx|work=Microsoft Developers Network|publisher=Microsoft Corporation|access-date=24 December 2011|date=15 November 2011}}
- {{cite web|first=Tony|last=Bradley|title=Introduction to Windows Integrity Control|url=https://community.broadcom.com/symantecenterprise/communities/community-home/librarydocuments/viewdocument?DocumentKey=2e7efdd7-def6-4b1b-995a-e68b328b6f27&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68&tab=librarydocuments|work=SecurityFocus|publisher=Symantec|access-date=24 December 2011|date=2 November 2010}}
- [http://blogs.technet.com/b/askds/archive/2008/04/18/the-security-descriptor-definition-language-of-love-part-1.aspx The Security Descriptor Definition Language of Love (Part 1)]
{{Refend}}
External links
{{Wikibooks|Guide to Windows Commands}}
- [https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/cacls_1 cacls | Microsoft Docs]
- [https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls icacls | Microsoft Docs]
{{Windows commands}}