**
Related Links
•Command-line reference A-Z
•Command shell overview
**

Cacls

Updated: December 07, 2007

Cacls

Displays or modifies discretionary access control lists (DACL) on specified files.

Syntax

caclsFileName [/t] [/e [/rUser [...]]] [/c] [/gUser:Permission ] [/pUser:Permission [...]] [/dUser [...]]

Parameters
FileName
Required. Displays DACLs of specified files.
/t
Changes DACLs of specified files in the current directory and all subdirectories.
/e
Edits a DACL instead of replacing it.
/r User
Revokes access rights for the specified user, is not valid without /e.
/c
Continues to change DACLs, ignoring errors.
/g User:Permission
Grants access rights to the specified user. The following table lists valid values for Permission. ValueDescriptionn Noner Readw Writec Change (Write)fFull Control
/p User:Permission
Replaces access rights for the specified user. The following table lists valid values for Permission. ValueDescriptionnNonerReadwWritecChange (Write)fFull Control
/d User
Denies access for the specified user.
/?
Displays help at the command prompt.
Remarks
•

Use the following table to interpret the results.

OutputACE applies to

OI

This folder and files.

CI

This folder and subfolders.

IO

The ACE does not apply to the current file/directory.

No output message

This folder only.

(OI)(CI)

This folder, subfolders, and files.

(OI)(CI)(IO)

Subfolders and files only.

(CI)(IO)

Subfolders only.

(OI)(IO)

Files only.

•

You can use wildcards (that is, ? and *) to specify multiple files.

•

You can specify more than one user.

Formatting legend

FormatMeaning

Italic

Information that the user must supply

Bold

Elements that the user must type exactly as shown

Ellipsis (...)

Parameter that can be repeated several times in a command line

Between brackets ([])

Optional items

Between braces ({}); choices separated by pipe (|). Example: {even|odd}

Set of choices from which the user must choose only one

Courier font

Code or program output