This webpage contains a series of examples of how xcacls.vbs can be used.

Overview

Xcacls.vbs is an augmented version of the Extended Change Access Control List tool (Xcacls.exe) that ships in the Windows 2000 and Windows Server 2003 Support Tools.

Xcacls.vbs is an unsupported utility that addresses specific limitations with the original Xcacls.exe utility, specifically the inability to append permissions to a folder whose child objects have the inheritance flag set.

Xcacls.vbs can be downloaded from: http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=19419

Examples

• List all privileges of a certain file or folder:
  
  cscript xcacls.vbs c:\test\file.txt
• List all privileges on a folder and on all files and folders inside that folder:
  
  cscript xcacls.vbs c:\test /F /S
• List all privileges on a folder and on all files and folders inside that folder also traverse all subfolders and do the same:
  
  cscript xcacls.vbs c:\test /F /S /T
• Give a user Full Control on a file or folder:
  
  cscript xcacls.vbs c:\test\file.txt /G MYDOMAIN\user:F /E
• Remove a user's access on a file or folder:
  
  cscript xcacls.vbs c:\test\file.txt /R MYDOMAIN\user /E
• Deny a user Full Control on a file or folder:
  
  cscript xcacls.vbs c:\test\file.txt /D MYDOMAIN\user:F /E
• Enable and apply inheritance on a folder:
  
  cscript xcacls.vbs c:\test /I ENABLE

Links

Other examples and help information can be found on the Microsoft support site on http://support.microsoft.com/default.aspx?scid=KB;EN-US;825751

Xcacls.vbs can be downloaded from: http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=19419