icacls says “access denied”

takeown says “access denied”

BPACler.exe utility (from http://www.bpsoftware.com/blog/) doesnt show any ACL settings at all for the problem file

Microsoft KB947870 (http://support.microsoft.com/kb/947870) describes the problem exactly but says it applies to Server 2008 only while I’m having the error with Vista Ultimate 32bit.

I tried this and it still didn’t work, but it made me try a few other things.

And I FINALY FOUND OUT HOW TO DO IT!. It’s strange, but no combination of ICACLS worked for me, but I found a post that did it. To set folder and file permissions in Vista, you can use CACLS (even though it’s deprecated, it works proprely) and use:
cacls “c:\test” /e /c /g “Users”:F

Maybe someone will find out how to do the same with icacls, or maybe icacls needs a fix.

Anyways, hope this will help someone else in the future.

I think the users group needs F,WDAC permisions on the root too.

Good luck,

Ernst

Great article by the way, but hoping someone can help me. I’ve been doing testing and such, and I have the icacls.exe working fairly well, but I have a problem.

I’m logged in as a limited user.

I use icacls from an elevated command prompt.
I create a test folder in the root directory named “test”.

I’m trying to give full control permissions to the “Users” group in windows vista, on that folder.

The command I use is this:
c:\>icacls “Test” /grant Users:(F,WDAC)

Now, from my limited user account, if I right-click and go to permissions, security tab and select Users, only the generic “Read & Execute”, “List” and “Read” permissions are checked. The only noticable difference is that I can click on the “Edit” button to edit the permissions manualy without having to give Admin credentials.

I’ve tried varied combinations of this command but can’t seem to stick those permission on the folder itself. If I have a file in the “test” directory and use the /T param the files take the permissions proprely.

Does anyone know of a way I can set those permissions on a Folder through a script or command-line?

Thank you in advance.