Windows 2000 Commands Pocket Reference

Name

subinaclRK

Synopsis

subinacl [/Test_Mode] /type items /action

Modify ACLs for the specified items. /Test_Mode says to indicate the action to take, but not actually to perform it. This command cannot be used on Dfs volumes.

/Type indicates the items’ object type: /file, /share, /subdirectories (traverse directory tree), /keyreg and subkeyreg (registry keys, with or without recursion), /service, /printer, and /kernelobject.

Actions are options that specify a transformation of the existing ACL (the default action is to display the ACL). Here are some of the most useful (see W2RKTools.Chm for a full list):

/Owner =User

Set item ownership.

/Replace=Old-user=New-user

Reassign the ACEs from the old user to the new user.

/ChangeDomain=Old-domain=New-domain

Replace all ACEs from the old domain with the corresponding ones from the new domain. There must be a trust relationship between the two domains.

/MigrateDomain=Old-domain=New-domain

Copy all ACEs from the old domain, changing them to the corresponding ACEs from the new domain. There must be a trust relationship between the two domains.

/Grant=Name=Perms/Deny=Name=Perms

Add a grant/denial ACE for the specified user or group, having the specified permissions. (See W2RKTools.Chm for permission codes.)