Tools to Manage Permissions

There are three large classes of tools to manage permissions: built-in GUI tools such as ACL UI, built-in command-line interface (CLI) tools such as icacls, and other tools such as subinacl. In this section we will very briefly introduce the major ones. The ACL UI is relatively self-explanatory, and we have already discussed it earlier. Therefore, this section focuses on the other two categories.

cacls and icacls

Change ACLs (cacls) has been built into Windows for many years. It is a command-line tool that was not entirely updated in Windows 2000 when the inheritance model changed. Consequently, Microsoft introduced improved cacls (icacls) in Windows Vista and Windows Server 2008. Although a far more powerful tool than ...

Get Windows Server® 2008 Security Resource Kit now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.