SubInACL is an alternative command line tool to iCACLS that enables administrators to obtain security information about files, registry keys, and services, and transfer this information from user to user, from local or global group to group, and from domain to domain.
- iCACLS is built into Windows so no additional download is needed.
- Reference documents (Microsoft)
iCACLS example of modifying file permissions:
@echo off REM ** /T = Performs the operation on all specified files in the current directory and its subdirectories. REM ** /F = Full Access REM ** /M = Modify Access if exist "C:\Program Files (x86)" goto 64 icacls "%ProgramFiles%\Folder" /inheritance:e /grant "MyDomain\Domain Users":M /T goto next :64 icacls "%ProgramFiles(x86)%\Folder" /inheritance:e /grant "MyDomain\Domain Users":M /T next pause