The Command Cacls: The Cacls Command in Windows

The Command Cacls: The Cacls Command in Windows is easier to understand when the core ideas are paired with practical examples. The sections below explain the topic clearly, highlight useful steps, and point out details that can prevent common errors.

Applies to: Windows Server (Semi-Annual Channel), Windows Server 2016, Windows Server 2012 R2, Windows Server 2012.

The cacls command displays or modifies an arbitrary access control list (DACL) on the specified file.

Syntax

 cacls [/ t] [/ m] [/ l] [/ s []] [/ e] [/ c] [/ g user:] [/ r user [.]] [/ p user: [.]] [/ d user [.]]

Parameters

ParameterDescription Required. Display Acls of specified files. / t Change the specified Acls in the current directory and all subdirectories. / m Change the Acls of the mounted drive to a folder. / l Working with Symbolic Link, not the target. / s: sddl replaces Acls with the ones specified in the SDDL string (invalid with / e , / g , / r , / p , or / d ). / e Edit ACL instead of replacing it. / c Continue to deny access error. / g user: Grant access to the specified user. Valid values for permissions: - n - none: No - r - read: Read - w - write: Write - c - change (write): Change write permissions - f - full control: Full control / r user [.] Revoke access of the specified user (only valid for / e ). [/ p user: [.] Replace the access of specific users. Valid values for permissions: - n - none: No - r - read: Read - w - write: Write - c - change (write): Change write permissions - f - full control: Full control [/ d user [.] Denies access to specified users. /? Show help at the command prompt.

Note

If this command has not been accepted, please use icacls instead.
Use the following table to interpret the results:

Output ( Access ) The access control entry (ACE) applies to OI (Short for Object inherit) / Folders and these files. CI (Short for Container inherit) / This directory and subdirectory. IO (Inherit only) / ACE does not apply to the current file / directory | No output message | Only this directory. OI) (CI) This directory, subdirectory and file. (OI) (CI) (IO) Only subdirectories and files. (CI) (IO) Only subfolder (OI) (IO) File only.

Bitsadmin create command in Windows
Bitsadmin complete command in Windows

FAQ

What is The Command Cacls: The Cacls Command in Windows?

Applies to: Windows Server (Semi-Annual Channel), Windows Server 2016, Windows Server 2012 R2, Windows Server 2012.

Why is The Command Cacls: The Cacls Command in Windows important?

A clear understanding of The Command Cacls: The Cacls Command in Windows helps you make informed decisions, avoid common mistakes, and use the relevant tools or techniques more effectively.

How should beginners approach The Command Cacls: The Cacls Command in Windows?

Start with the fundamental concepts, follow the examples step by step, and test each change in a safe environment before applying it to important systems or data.