你目前正处于脱机状态,正在等待 Internet 重新连接

Icacls.exe 实用程序是用于 Windows Server 2003 with Service Pack 2

针对 Windows XP 的支持已终止

Microsoft 已于 2014 年 4 月 8 日终止了针对 Windows XP 的支持。该更改已影响到您的软件更新和安全选项。 了解这一措施对于您的含义以及如何继续保持受保护状态。

针对 Windows Server 2003 的支持已于 2015 年 7 月 14 日终止。

Microsoft 已于 2015 年 7 月 14 日终止了对于 Windows Server 2003 的支持。该更改已影响到您的软件更新和安全选项。 了解这一措施对于您的含义以及如何继续保持受保护状态。

重要说明:本文是由 Microsoft 机器翻译软件进行的翻译并可能由 Microsoft 社区通过社区翻译机构(CTF)技术进行后期编辑,或可能是由人工进行的翻译。Microsoft 同时向您提供机器翻译、人工翻译及社区后期编辑的文章,以便对我们知识库中的所有文章以多种语言提供访问。翻译的文章可能存在词汇、句法和/或语法方面的错误。Microsoft 对由于内容的误译或客户对内容的使用所导致的任何不准确、错误或损失不承担责任。

点击这里察看该文章的英文版: 919240
概要
本文介绍了 Icacls.exe 命令行实用程序。此实用程序可用于修改在运行 Microsoft Windows Server 2003 with Service Pack 2 (SP2) 的计算机上的 NTFS 文件系统权限。

目前,您可以使用 Xcacls.exe 实用程序、 Cacls.exe 实用程序和 Xcacls.vbs 实用程序来修改 Windows Server 2003 中的 NTFS 权限。Icacls.exe 实用程序是用于修改 NTFS 权限的替代选项。Icacls.exe 实用程序解决了使用现有实用程序时出现的各种问题。

Icacls.exe 实用程序是包含在 Windows Vista 和 Windows Server 2003 SP2。
更多信息
要安装的 Icacls.exe 实用程序,请安装最新的 service pack,Windows Server 2003。 有关如何安装 Windows Server 2003 的最新服务包的详细信息,请单击下面的文章编号,以查看 Microsoft 知识库中相应的文章:
889100 如何获取最新的 Windows Server 2003 service pack

Icacls.exe 实用程序语法

若要查看下面的语法信息,请键入 icacls.exe / 吗? 在命令提示符处。
ICACLS name /save aclfile [/T] [/C]    store the acls for all matching names into aclfile for    later use with /restore.ICACLS directory [/substitute SidOld SidNew [...]] /restore aclfile [/C]    applies the stored acls to files in directory.ICACLS name /setowner user [/T] [/C]    changes the owner of all matching names.ICACLS name /findsid Sid [/T] [/C]    finds all matching names that contain an ACL    explicitly mentioning Sid.ICACLS name /verify [/T] [/C]    finds all files whose ACL is not in canonical form or whose    lengths are inconsistent with ACE counts.ICACLS name /resize [/T] [/C] [/L]    changes incorrect recorded lengths of ACLs to true lengths.ICACLS name /reset [/T] [/C]    replaces acls with default inherited acls for all matching files.ICACLS name [/grant[:r] Sid:perm[...]]       [/deny Sid:perm [...]]       [/remove[:g|:d]] Sid[...]] [/T] [/C]    /grant[:r] Sid:perm grants the specified user access rights. With :r,        the permissions replace any previously granted explicit permissions.        Without :r, the permissions are added to any previously granted        explicit permissions.    /deny Sid:perm explicitly denies the specified user access rights.        An explicit deny ACE is added for the stated permissions and        the same permissions in any explicit grant are removed.    /remove[:[g|d]] Sid removes all occurrences of Sid in the acl. With        :g, it removes all occurrences of granted rights to that Sid. With        :d, it removes all occurrences of denied rights to that Sid.Note:    Sids may be in either numeric or friendly name form. If a numeric    form is given, affix a * to the start of the SID.    /T indicates that this operation is performed on all matching        files/directories below the directories specified in the name.    /C indicates that this operation will continue on all file errors.        Error messages will still be displayed.    ICACLS preserves the canonical ordering of ACE entries:            Explicit denials            Explicit grants            Inherited denials            Inherited grants    perm is a permission mask and can be specified in one of two forms:        a sequence of simple rights:                F - full access                M - modify access                RX - read and execute access                R - read-only access                W - write-only access        a comma-separated list in parentheses of specific rights:                D - delete                RC - read control                WDAC - write DAC                WO - write owner                S - synchronize                AS - access system security                MA - maximum allowed                GR - generic read                GW - generic write                GE - generic execute                GA - generic all                RD - read data/list directory                WD - write data/add file                AD - append data/add subdirectory                REA - read extended attributes                WEA - write extended attributes                X - execute/traverse                DC - delete child                RA - read attributes                WA - write attributes        inheritance rights may precede either form and are applied        only to directories:                (OI) - object inherit                (CI) - container inherit                (IO) - inherit only                (NP) - don't propagate inheritExamples:        icacls c:\windows\* /save AclFile /T        - Will save the ACLs for all files under c:\windows          and its subdirectories to AclFile.        icacls c:\windows\ /restore AclFile        - Will restore the Acls for every file within          AclFile that exists in c:\windows and its subdirectories        icacls file /grant Administrator:(D,WDAC)        - Will grant the user Administrator Delete and Write DAC          permissions to file        icacls file /grant *S-1-1-0:(D,WDAC)        - Will grant the user defined by sid S-1-1-0 Delete and          Write DAC permissions to file

其他可用的实用程序来修改 NTFS 权限

其他实用程序,您可以使用来修改 NTFS 权限的更多信息,请单击下面的文章编号,以查看 Microsoft 知识库中相应的文章:
318754 如何使用 Xcacls.exe 来修改 NTFS 权限
135268 如何在批处理文件使用 Cacls.exe
825751 如何使用 Xcacls.vbs 来修改 NTFS 权限
cacls xcacls ACL ntfs icacls subinacl 安全

警告:本文已自动翻译

属性

文章 ID:919240 - 上次审阅时间:03/15/2015 10:25:00 - 修订版本: 4.0

Microsoft Windows Server 2003, Enterprise x64 Edition, Microsoft Windows Server 2003, Standard x64 Edition, Microsoft Windows Server 2003 Enterprise Edition, Microsoft Windows Server 2003 Standard Edition, Microsoft Windows Server 2003 Web Edition, Microsoft Windows Server 2003 R2 Datacenter Edition (32-Bit x86), Microsoft Windows Server 2003 R2 Datacenter Edition (64-Bit x86), Microsoft Windows Server 2003 R2 Enterprise Edition (32-Bit x86), Microsoft Windows Server 2003 R2 Enterprise Edition (64-Bit x86), Microsoft Windows Server 2003 R2 Standard Edition (32-bit x86), Microsoft Windows Server 2003 R2 Standard Edition (64-Bit x86), Microsoft Windows Server 2003 Datacenter Edition, Microsoft Windows Server 2003, Datacenter x64 Edition, Microsoft Windows XP Professional x64 Edition

  • kbwinserv2003presp2fix kbexpertiseinter kbfix kbqfe kbmt KB919240 KbMtzh
反馈