Content

MS DOS Command: CACLS

Reference from Microsoft WinXP cmd help

Description

Displays or modifies access control lists (ACLs) of files

Syntax

CACLS filename [/T] [/E] [/C] [/G user:perm] [/R user [...]] [/P user:perm [...]] [/D user [...]]

Parameters

filename	Display ACLs.
/T	Changes ACLs of specified files in the current directory and all subdirectories.
/E	Edit ACL instead of replacing it.
/C	Continue on access denied errors.
/G user:perm	Grant specified user access rights. Perm can be: R Read W Writed C Change (write) F Full control /R user Revoke specified user's access rights (only valid with /E).
/P user:perm	Replace specified user's access rights. Perm can be: N None R Read W Writed C Change (write) F Full control
/D user	Deny specified user access.

Remarks

Wildcards can be used to specify more than one file in a command. You can specify more than one user in a command.

Abbreviations:

CI	Container Inherit. The ACE will be inherited by directories.
OI	Object Inherit. The ACE will be inherited by files.
IO	Inherit Only. The ACE does not apply to the current file/directory.