Solved Problem with icacls


V

vsub

Active member
Member
VIP
Local time
11:23 PM
Posts
227
OS
Windows 11
I am trying for set a specific restriction to a file but I keep getting an error and I am not sure why

X:\>icacls file.exe /deny DESKTOP\Administrators:(X) DESKTOP\Administrators: No mapping between account names and security IDs was done. Successfully processed 0 files; Failed processing 1 files

If I use the same command for any user than the admin(I am the admin and cmd is running as admin),it works fine

The manual very long process is
Properties on the file=>Security=>Advanced=>Add=>Set Principal=>DESKTOP\Administrators=>Ok=>Show Advanced Permissions=>Clear all and enable "Traverse folder / execute file" and hit ok
 

My Computer My Computer

At a glance

Windows 1114700HX64GBRTX 4070
OS
Windows 11
Computer type
Laptop
Manufacturer/Model
MSI Sword 17 HX
CPU
14700HX
Memory
64GB
Graphics Card(s)
RTX 4070
Have you tried using BUILTIN\Administrators instead of DESKTOP ?
 

My Computer My Computer

At a glance

Win11Pro 25H2 (26200.9168)i7-12700f32gb ddr4nvidia rtx3060ti
OS
Win11Pro 25H2 (26200.9168)
Computer type
PC/Desktop
Manufacturer/Model
self-built
CPU
i7-12700f
Motherboard
gigabyte auros b660
Memory
32gb ddr4
Graphics Card(s)
nvidia rtx3060ti
Sound Card
onboard realtek
Monitor(s) Displays
1 x benq, 2 x lg
Screen Resolution
1 at 2560x1080, 2 at 1920x1080
Hard Drives
nvme 1tb crucial ssd
sata 1tb samsung ssd
1tb HDD, 3tb HDD
PSU
corsair rm750
Case
NZXT H710
Cooling
BeQuiet Dark Rock
Keyboard
steelseries apex 3
Mouse
generic usb
Internet Speed
500 down 20 up
Browser
librewolf
Antivirus
eset nod32
Sadly no change,I get the same error

Edit:
What the,just using Administrators did it

X:\>icacls file.exe /deny Administrators:(X)
 

My Computer My Computer

At a glance

Windows 1114700HX64GBRTX 4070
OS
Windows 11
Computer type
Laptop
Manufacturer/Model
MSI Sword 17 HX
CPU
14700HX
Memory
64GB
Graphics Card(s)
RTX 4070
Good to know!
 

My Computer My Computer

At a glance

Win11Pro 25H2 (26200.9168)i7-12700f32gb ddr4nvidia rtx3060ti
OS
Win11Pro 25H2 (26200.9168)
Computer type
PC/Desktop
Manufacturer/Model
self-built
CPU
i7-12700f
Motherboard
gigabyte auros b660
Memory
32gb ddr4
Graphics Card(s)
nvidia rtx3060ti
Sound Card
onboard realtek
Monitor(s) Displays
1 x benq, 2 x lg
Screen Resolution
1 at 2560x1080, 2 at 1920x1080
Hard Drives
nvme 1tb crucial ssd
sata 1tb samsung ssd
1tb HDD, 3tb HDD
PSU
corsair rm750
Case
NZXT H710
Cooling
BeQuiet Dark Rock
Keyboard
steelseries apex 3
Mouse
generic usb
Internet Speed
500 down 20 up
Browser
librewolf
Antivirus
eset nod32
Code: 
icacls file.ps1 /deny "Administrators:(X)"
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
Hughbris said:
Odd, it works on my machine.

icacls red2.exe /deny BUILTIN\Administrators:(X)
processed file: red2.exe
Successfully processed 1 files; Failed processing 0 files

Are you logged in to the actual "hidden" Admin account on your machine, or just your usual account that happens to be part of the Administrators group?
Click to expand...
I installed windows and create a local admin account
Btw,do you know how to remove the added user

Changing deny to grant does not remove it

1787682648830.webp
 

My Computer My Computer

At a glance

Windows 1114700HX64GBRTX 4070
OS
Windows 11
Computer type
Laptop
Manufacturer/Model
MSI Sword 17 HX
CPU
14700HX
Memory
64GB
Graphics Card(s)
RTX 4070
It would be great if i can create a bat file that deny the permission if it is allowed and allow it if it is denied
 

My Computer My Computer

At a glance

Windows 1114700HX64GBRTX 4070
OS
Windows 11
Computer type
Laptop
Manufacturer/Model
MSI Sword 17 HX
CPU
14700HX
Memory
64GB
Graphics Card(s)
RTX 4070
@OAT yes it was because I was adding DESKTOP
 

My Computer My Computer

At a glance

Windows 1114700HX64GBRTX 4070
OS
Windows 11
Computer type
Laptop
Manufacturer/Model
MSI Sword 17 HX
CPU
14700HX
Memory
64GB
Graphics Card(s)
RTX 4070
  • Like
Reactions: OAT
There's the /REMOVE command but you might lock yourself out of the access to the file altogether, unless an immediate /grant command restores it.
 

My Computer My Computer

At a glance

Win11Pro 25H2 (26200.9168)i7-12700f32gb ddr4nvidia rtx3060ti
OS
Win11Pro 25H2 (26200.9168)
Computer type
PC/Desktop
Manufacturer/Model
self-built
CPU
i7-12700f
Motherboard
gigabyte auros b660
Memory
32gb ddr4
Graphics Card(s)
nvidia rtx3060ti
Sound Card
onboard realtek
Monitor(s) Displays
1 x benq, 2 x lg
Screen Resolution
1 at 2560x1080, 2 at 1920x1080
Hard Drives
nvme 1tb crucial ssd
sata 1tb samsung ssd
1tb HDD, 3tb HDD
PSU
corsair rm750
Case
NZXT H710
Cooling
BeQuiet Dark Rock
Keyboard
steelseries apex 3
Mouse
generic usb
Internet Speed
500 down 20 up
Browser
librewolf
Antivirus
eset nod32
vsub said:
@OAT yes it was because I was adding DESKTOP
Click to expand...
Why naming your system DESKTOP? A bit of an odd machine name.
Anyway, it's your rig, you can do whatever you want.
 

My Computers My Computers

System One System Two

  • At a glance

    All Branches but StableAMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 232 GB DDR5Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB...
    OS
    All Branches but Stable
    Computer type
    Laptop
    Manufacturer/Model
    Acer Nitro ANV15-51
    CPU
    AMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 2
    Motherboard
    Sportage_RBH
    Memory
    32 GB DDR5
    Graphics Card(s)
    Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB GDDR6
    Sound Card
    AMD/Realtek(R) Audio
    Monitor(s) Displays
    Integrated Monitor (15.3"vis)
    Screen Resolution
    FHD 1920X1080 16:9 144Hz
    Hard Drives
    KINGSTON OM8SEP4512Q-AA 1TB
    Western Digital 256GB
    PSU
    19V DC 6.32 A 120 W
    Cooling
    Dual Fans
    Mouse
    MS Bluetooth
    Internet Speed
    Fiber 1GB Cox -us & 1GB Orange-fr
    Browser
    Edge Canary- Firefox Nightly-Chrome Dev-Chrome Dev
    Antivirus
    Windows Defender

  • At a glance

    Windows 11 BetaAMD A9-94208 GB of DDR4AMD Radeon R5
    Operating System
    Windows 11 Beta
    Computer type
    Laptop
    Manufacturer/Model
    Asus X751BP
    CPU
    AMD A9-9420
    Memory
    8 GB of DDR4
    Graphics card(s)
    AMD Radeon R5
    Screen Resolution
    1600x900
    Hard Drives
    Seagate 1 TB
OAT said:
Why naming your system DESKTOP? A bit of an odd machine name.
Anyway, it's your rig, you can do whatever you want.
Click to expand...
Just choosing a random name,no reason
 

My Computer My Computer

At a glance

Windows 1114700HX64GBRTX 4070
OS
Windows 11
Computer type
Laptop
Manufacturer/Model
MSI Sword 17 HX
CPU
14700HX
Memory
64GB
Graphics Card(s)
RTX 4070
vsub said:
Just choosing a random name,no reason
Click to expand...
So you have multiple Desktop folders on a machine called Desktop.
I see. It's different, that's all.
 

My Computers My Computers

System One System Two

  • At a glance

    All Branches but StableAMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 232 GB DDR5Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB...
    OS
    All Branches but Stable
    Computer type
    Laptop
    Manufacturer/Model
    Acer Nitro ANV15-51
    CPU
    AMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 2
    Motherboard
    Sportage_RBH
    Memory
    32 GB DDR5
    Graphics Card(s)
    Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB GDDR6
    Sound Card
    AMD/Realtek(R) Audio
    Monitor(s) Displays
    Integrated Monitor (15.3"vis)
    Screen Resolution
    FHD 1920X1080 16:9 144Hz
    Hard Drives
    KINGSTON OM8SEP4512Q-AA 1TB
    Western Digital 256GB
    PSU
    19V DC 6.32 A 120 W
    Cooling
    Dual Fans
    Mouse
    MS Bluetooth
    Internet Speed
    Fiber 1GB Cox -us & 1GB Orange-fr
    Browser
    Edge Canary- Firefox Nightly-Chrome Dev-Chrome Dev
    Antivirus
    Windows Defender

  • At a glance

    Windows 11 BetaAMD A9-94208 GB of DDR4AMD Radeon R5
    Operating System
    Windows 11 Beta
    Computer type
    Laptop
    Manufacturer/Model
    Asus X751BP
    CPU
    AMD A9-9420
    Memory
    8 GB of DDR4
    Graphics card(s)
    AMD Radeon R5
    Screen Resolution
    1600x900
    Hard Drives
    Seagate 1 TB
Hughbris said:
There's the /REMOVE command but you might lock yourself out of the access to the file altogether, unless an immediate /grant command restores it.
Click to expand...
That did it
You cannot remove the actual administrator but you can the extra one added

So
icacls X:\file.exe /deny Administrators:(x)
and
icacls X:\file.exe /remove Administrators

Can I somehow check the current permission so I can create a bat file that deny and remove the restriction
 

My Computer My Computer

At a glance

Windows 1114700HX64GBRTX 4070
OS
Windows 11
Computer type
Laptop
Manufacturer/Model
MSI Sword 17 HX
CPU
14700HX
Memory
64GB
Graphics Card(s)
RTX 4070
You could use Shawn's context menu: (edit as desired)
Save as a .reg file



Code: 
Windows Registry Editor Version 5.00

; Created by: Shawn Brink
; Created on: September 24, 2022
; Tutorial: https://www.elevenforum.com/t/add-change-owner-to-context-menu-in-windows-11.9181/


; For files
[HKEY_CLASSES_ROOT\*\shell\ChangeOwner]
"MUIVerb"="Change Owner"
"Icon"="imageres.dll,-88"
"SubCommands"=""


[HKEY_CLASSES_ROOT\*\shell\ChangeOwner\shell\01Owner]
@="See Current Owner"
"Icon"="imageres.dll,-1029"

[HKEY_CLASSES_ROOT\*\shell\ChangeOwner\shell\01Owner\command]
@="powershell -NoExit Get-ACL '%1'| Format-List -Property Owner"


[HKEY_CLASSES_ROOT\*\shell\ChangeOwner\shell\02Owner]
@="Take Ownership"
"HasLUAShield"=""
"NeverDefault"=""
"CommandFlags"=dword:00000020

[HKEY_CLASSES_ROOT\*\shell\ChangeOwner\shell\02Owner\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c takeown /f \\\"%1\\\" && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l' -Verb runAs\""
"IsolatedCommand"= "powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c takeown /f \\\"%1\\\" && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l' -Verb runAs\""


[HKEY_CLASSES_ROOT\*\shell\ChangeOwner\shell\Administrators]
@="Change Owner to Administrators"
"HasLUAShield"=""
"CommandFlags"=dword:00000020

[HKEY_CLASSES_ROOT\*\shell\ChangeOwner\shell\Administrators\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"Administrators\" /t /c /l' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"Administrators\" /t /c /l' -Verb runAs\""


[HKEY_CLASSES_ROOT\*\shell\ChangeOwner\shell\Everyone]
@="Change Owner to Everyone"
"HasLUAShield"=""

[HKEY_CLASSES_ROOT\*\shell\ChangeOwner\shell\Everyone\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"Everyone\" /t /c /l' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"Everyone\" /t /c /l' -Verb runAs\""


[HKEY_CLASSES_ROOT\*\shell\ChangeOwner\shell\SYSTEM]
@="Change Owner to SYSTEM"
"HasLUAShield"=""

[HKEY_CLASSES_ROOT\*\shell\ChangeOwner\shell\SYSTEM\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"SYSTEM\" /t /c /l' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"SYSTEM\" /t /c /l' -Verb runAs\""


[HKEY_CLASSES_ROOT\*\shell\ChangeOwner\shell\TrustedInstaller]
@="Change Owner to TrustedInstaller"
"HasLUAShield"=""

[HKEY_CLASSES_ROOT\*\shell\ChangeOwner\shell\TrustedInstaller\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"\"\"NT Service\\TrustedInstaller\"\"\" /t /c /l' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"\"\"NT Service\\TrustedInstaller\"\"\" /t /c /l' -Verb runAs\""



; For folders
[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner]
"MUIVerb"="Change Owner"
"AppliesTo"="NOT (System.ItemPathDisplay:=\"C:\\Users\" OR System.ItemPathDisplay:=\"C:\\ProgramData\" OR System.ItemPathDisplay:=\"C:\\Windows\" OR System.ItemPathDisplay:=\"C:\\Windows\\System32\" OR System.ItemPathDisplay:=\"C:\\Program Files\" OR System.ItemPathDisplay:=\"C:\\Program Files (x86)\")"
"Icon"="imageres.dll,-88"
"NoWorkingDirectory"=""
"Position"="middle"
"SubCommands"=""


[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner\shell\01Owner]
@="See Current Owner"
"Icon"="imageres.dll,-1029"

[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner\shell\01Owner\command]
@="powershell -NoExit Get-ACL '%1'| Format-List -Property Owner"


[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner\shell\02Owner]
@="Take Ownership"
"HasLUAShield"=""
"CommandFlags"=dword:00000020

[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner\shell\02Owner\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c takeown /f \\\"%1\\\" /r /d y && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l /q' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c takeown /f \\\"%1\\\" /r /d y && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l /q' -Verb runAs\""


[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner\shell\Administrators]
@="Change Owner to Administrators"
"HasLUAShield"=""
"CommandFlags"=dword:00000020

[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner\shell\Administrators\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"Administrators\" /t /c /l' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"Administrators\" /t /c /l' -Verb runAs\""


[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner\shell\Everyone]
@="Change Owner to Everyone"
"HasLUAShield"=""

[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner\shell\Everyone\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"Everyone\" /t /c /l' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"Everyone\" /t /c /l' -Verb runAs\""


[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner\shell\SYSTEM]
@="Change Owner to SYSTEM"
"HasLUAShield"=""

[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner\shell\SYSTEM\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"SYSTEM\" /t /c /l' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"SYSTEM\" /t /c /l' -Verb runAs\""


[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner\shell\TrustedInstaller]
@="Change Owner to TrustedInstaller"
"HasLUAShield"=""

[HKEY_CLASSES_ROOT\Directory\shell\ChangeOwner\shell\TrustedInstaller\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"\"\"NT Service\\TrustedInstaller\"\"\" /t /c /l' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \\\"%1\\\" /setowner \"\"\"NT Service\\TrustedInstaller\"\"\" /t /c /l' -Verb runAs\""



; For drives
[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner]
"MUIVerb"="Change Owner"
"AppliesTo"="NOT (System.ItemPathDisplay:=\"C:\\\")"
"Icon"="imageres.dll,-88"
"NoWorkingDirectory"=""
"Position"="middle"
"SubCommands"=""


[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner\shell\01Owner]
@="See Current Owner"
"Icon"="imageres.dll,-1029"

[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner\shell\01Owner\command]
@="powershell -NoExit Get-ACL '%1'| Format-List -Property Owner"


[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner\shell\runas]
@="Take Ownership"
"HasLUAShield"=""
"CommandFlags"=dword:00000020

[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner\shell\runas\command]
@="cmd.exe /c takeown /f \"%1\\\" /r /d y && icacls \"%1\\\" /grant *S-1-3-4:F /t /c"
"IsolatedCommand"="cmd.exe /c takeown /f \"%1\\\" /r /d y && icacls \"%1\\\" /grant *S-1-3-4:F /t /c"


[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner\shell\runasAdministrators]
@="Change Owner to Administrators"
"HasLUAShield"=""
"CommandFlags"=dword:00000020

[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner\shell\runasAdministrators\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \"%1\\\" /setowner \"Administrators\" /c' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \"%1\\\" /setowner \"Administrators\" /c' -Verb runAs\""


[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner\shell\runasEveryone]
@="Change Owner to Everyone"
"HasLUAShield"=""

[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner\shell\runasEveryone\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/k icacls \"%1\\\" /setowner \"Everyone\" /c' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/k icacls \"%1\\\" /setowner \"Everyone\" /c' -Verb runAs\""


[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner\shell\runasSYSTEM]
@="Change Owner to SYSTEM"
"HasLUAShield"=""

[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner\shell\runasSYSTEM\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \"%1\\\" /setowner \"SYSTEM\" /c' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \"%1\\\" /setowner \"SYSTEM\" /c' -Verb runAs\""


[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner\shell\runasTrustedInstaller]
@="Change Owner to TrustedInstaller"
"HasLUAShield"=""

[HKEY_CLASSES_ROOT\Drive\shell\ChangeOwner\shell\runasTrustedInstaller\command]
@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \"%1\\\" /setowner \"\"\"NT Service\\TrustedInstaller\"\"\" /c' -Verb runAs\""
"IsolatedCommand"="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c icacls \"%1\\\" /setowner \"\"\"NT Service\\TrustedInstaller\"\"\" /c' -Verb runAs\""
 

My Computers My Computers

System One System Two

  • At a glance

    All Branches but StableAMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 232 GB DDR5Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB...
    OS
    All Branches but Stable
    Computer type
    Laptop
    Manufacturer/Model
    Acer Nitro ANV15-51
    CPU
    AMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 2
    Motherboard
    Sportage_RBH
    Memory
    32 GB DDR5
    Graphics Card(s)
    Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB GDDR6
    Sound Card
    AMD/Realtek(R) Audio
    Monitor(s) Displays
    Integrated Monitor (15.3"vis)
    Screen Resolution
    FHD 1920X1080 16:9 144Hz
    Hard Drives
    KINGSTON OM8SEP4512Q-AA 1TB
    Western Digital 256GB
    PSU
    19V DC 6.32 A 120 W
    Cooling
    Dual Fans
    Mouse
    MS Bluetooth
    Internet Speed
    Fiber 1GB Cox -us & 1GB Orange-fr
    Browser
    Edge Canary- Firefox Nightly-Chrome Dev-Chrome Dev
    Antivirus
    Windows Defender

  • At a glance

    Windows 11 BetaAMD A9-94208 GB of DDR4AMD Radeon R5
    Operating System
    Windows 11 Beta
    Computer type
    Laptop
    Manufacturer/Model
    Asus X751BP
    CPU
    AMD A9-9420
    Memory
    8 GB of DDR4
    Graphics card(s)
    AMD Radeon R5
    Screen Resolution
    1600x900
    Hard Drives
    Seagate 1 TB
I suspect Powershell would be more appropriate since it has the Get-ACL / Set-ACL commands, but it's way out of my wheelhouse.
Also bear in mind that with ACLs "Deny" is implicit, so you really only need to check for granted permissions.
 

My Computer My Computer

At a glance

Win11Pro 25H2 (26200.9168)i7-12700f32gb ddr4nvidia rtx3060ti
OS
Win11Pro 25H2 (26200.9168)
Computer type
PC/Desktop
Manufacturer/Model
self-built
CPU
i7-12700f
Motherboard
gigabyte auros b660
Memory
32gb ddr4
Graphics Card(s)
nvidia rtx3060ti
Sound Card
onboard realtek
Monitor(s) Displays
1 x benq, 2 x lg
Screen Resolution
1 at 2560x1080, 2 at 1920x1080
Hard Drives
nvme 1tb crucial ssd
sata 1tb samsung ssd
1tb HDD, 3tb HDD
PSU
corsair rm750
Case
NZXT H710
Cooling
BeQuiet Dark Rock
Keyboard
steelseries apex 3
Mouse
generic usb
Internet Speed
500 down 20 up
Browser
librewolf
Antivirus
eset nod32
Hughbris said:
Also bear in mind that with ACLs "Deny" is implicit, so you really only need to check for granted permissions.
Click to expand...
That's partly true. There are implicit denials, as in "Patrick doesn't have access to this file," but there are explicit denials, as in "Exclude Patrick specifically from opening this file, even if he would otherwise have permission via some other ACE in the ACL."
 

My Computer My Computer

At a glance

Windows 11 Enterprise 25H2
OS
Windows 11 Enterprise 25H2
That's good to know, last time I dealt with ACLs was years ago with Cisco IOS and I'm conflating the two.
 

My Computer My Computer

At a glance

Win11Pro 25H2 (26200.9168)i7-12700f32gb ddr4nvidia rtx3060ti
OS
Win11Pro 25H2 (26200.9168)
Computer type
PC/Desktop
Manufacturer/Model
self-built
CPU
i7-12700f
Motherboard
gigabyte auros b660
Memory
32gb ddr4
Graphics Card(s)
nvidia rtx3060ti
Sound Card
onboard realtek
Monitor(s) Displays
1 x benq, 2 x lg
Screen Resolution
1 at 2560x1080, 2 at 1920x1080
Hard Drives
nvme 1tb crucial ssd
sata 1tb samsung ssd
1tb HDD, 3tb HDD
PSU
corsair rm750
Case
NZXT H710
Cooling
BeQuiet Dark Rock
Keyboard
steelseries apex 3
Mouse
generic usb
Internet Speed
500 down 20 up
Browser
librewolf
Antivirus
eset nod32
Another example would be if you had a parent folder and all the children underneath inheriting the parent's permissions. You may want to block specific subfolders or files on a case-by-case basis.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
You must log in or register to reply here.

Similar threads

Problem with Media player
Replies
13
Views
686
Fabler2
Fabler2
Problem With "apps" opening as "background processes"
Replies
6
Views
4K
StIdes40oz
S
Solved widgets problem
2
Replies
39
Views
2K
spapakons
spapakons
Using JASC Paint Shop Pro 9 on Win 11 - Problem when exiting
Replies
11
Views
466
Ghot
Ghot
Weird problem with W11 activation
Replies
8
Views
478
Bree
Bree

Latest Support Threads

Latest Tutorials

Back
Top Bottom