你目前正处于脱机状态,正在等待 Internet 重新连接

Icacls.exe 实用程序是用于 Windows Server 2003 with Service Pack 2

针对 Windows XP 的支持已终止

Microsoft 已于 2014 年 4 月 8 日终止了针对 Windows XP 的支持。该更改已影响到您的软件更新和安全选项。 了解这一措施对于您的含义以及如何继续保持受保护状态。

针对 Windows Server 2003 的支持已于 2015 年 7 月 14 日终止。

Microsoft 已于 2015 年 7 月 14 日终止了对于 Windows Server 2003 的支持。该更改已影响到您的软件更新和安全选项。 了解这一措施对于您的含义以及如何继续保持受保护状态。

重要说明:本文是由 Microsoft 机器翻译软件进行的翻译并可能由 Microsoft 社区通过社区翻译机构(CTF)技术进行后期编辑,或可能是由人工进行的翻译。Microsoft 同时向您提供机器翻译、人工翻译及社区后期编辑的文章,以便对我们知识库中的所有文章以多种语言提供访问。翻译的文章可能存在词汇、句法和/或语法方面的错误。Microsoft 对由于内容的误译或客户对内容的使用所导致的任何不准确、错误或损失不承担责任。

919240
概要
本文介绍了 Icacls.exe 命令行实用程序。此实用程序可用于修改在运行 Microsoft Windows Server 2003 with Service Pack 2 (SP2) 的计算机上的 NTFS 文件系统权限。

目前,您可以使用 Xcacls.exe 实用程序、 Cacls.exe 实用程序和 Xcacls.vbs 实用程序来修改 Windows Server 2003 中的 NTFS 权限。Icacls.exe 实用程序是用于修改 NTFS 权限的替代选项。Icacls.exe 实用程序解决了使用现有实用程序时出现的各种问题。

Icacls.exe 实用程序是包含在 Windows Vista 和 Windows Server 2003 SP2。
更多信息
要安装的 Icacls.exe 实用程序,请安装最新的 service pack,Windows Server 2003。 有关如何安装 Windows Server 2003 的最新服务包的详细信息,请单击下面的文章编号,以查看 Microsoft 知识库中相应的文章:
889100 如何获取最新的 Windows Server 2003 service pack

Icacls.exe 实用程序语法

若要查看下面的语法信息,请键入 icacls.exe / 吗? 在命令提示符处。
ICACLS name /save aclfile [/T] [/C]    store the acls for all matching names into aclfile for    later use with /restore.ICACLS directory [/substitute SidOld SidNew [...]] /restore aclfile [/C]    applies the stored acls to files in directory.ICACLS name /setowner user [/T] [/C]    changes the owner of all matching names.ICACLS name /findsid Sid [/T] [/C]    finds all matching names that contain an ACL    explicitly mentioning Sid.ICACLS name /verify [/T] [/C]    finds all files whose ACL is not in canonical form or whose    lengths are inconsistent with ACE counts.ICACLS name /resize [/T] [/C] [/L]    changes incorrect recorded lengths of ACLs to true lengths.ICACLS name /reset [/T] [/C]    replaces acls with default inherited acls for all matching files.ICACLS name [/grant[:r] Sid:perm[...]]       [/deny Sid:perm [...]]       [/remove[:g|:d]] Sid[...]] [/T] [/C]    /grant[:r] Sid:perm grants the specified user access rights. With :r,        the permissions replace any previously granted explicit permissions.        Without :r, the permissions are added to any previously granted        explicit permissions.    /deny Sid:perm explicitly denies the specified user access rights.        An explicit deny ACE is added for the stated permissions and        the same permissions in any explicit grant are removed.    /remove[:[g|d]] Sid removes all occurrences of Sid in the acl. With        :g, it removes all occurrences of granted rights to that Sid. With        :d, it removes all occurrences of denied rights to that Sid.Note:    Sids may be in either numeric or friendly name form. If a numeric    form is given, affix a * to the start of the SID.    /T indicates that this operation is performed on all matching        files/directories below the directories specified in the name.    /C indicates that this operation will continue on all file errors.        Error messages will still be displayed.    ICACLS preserves the canonical ordering of ACE entries:            Explicit denials            Explicit grants            Inherited denials            Inherited grants    perm is a permission mask and can be specified in one of two forms:        a sequence of simple rights:                F - full access                M - modify access                RX - read and execute access                R - read-only access                W - write-only access        a comma-separated list in parentheses of specific rights:                D - delete                RC - read control                WDAC - write DAC                WO - write owner                S - synchronize                AS - access system security                MA - maximum allowed                GR - generic read                GW - generic write                GE - generic execute                GA - generic all                RD - read data/list directory                WD - write data/add file                AD - append data/add subdirectory                REA - read extended attributes                WEA - write extended attributes                X - execute/traverse                DC - delete child                RA - read attributes                WA - write attributes        inheritance rights may precede either form and are applied        only to directories:                (OI) - object inherit                (CI) - container inherit                (IO) - inherit only                (NP) - don't propagate inheritExamples:        icacls c:\windows\* /save AclFile /T        - Will save the ACLs for all files under c:\windows          and its subdirectories to AclFile.        icacls c:\windows\ /restore AclFile        - Will restore the Acls for every file within          AclFile that exists in c:\windows and its subdirectories        icacls file /grant Administrator:(D,WDAC)        - Will grant the user Administrator Delete and Write DAC          permissions to file        icacls file /grant *S-1-1-0:(D,WDAC)        - Will grant the user defined by sid S-1-1-0 Delete and          Write DAC permissions to file

其他可用的实用程序来修改 NTFS 权限

其他实用程序,您可以使用来修改 NTFS 权限的更多信息,请单击下面的文章编号,以查看 Microsoft 知识库中相应的文章:
318754 如何使用 Xcacls.exe 来修改 NTFS 权限
135268 如何在批处理文件使用 Cacls.exe
825751 如何使用 Xcacls.vbs 来修改 NTFS 权限
cacls xcacls ACL ntfs icacls subinacl 安全

警告: 本文已自动翻译

属性

文章 ID:919240 - 上次审阅时间:03/15/2015 10:25:00 - 修订版本: 4.0

  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Standard x64 Edition
  • Microsoft Windows Server 2003 Enterprise Edition
  • Microsoft Windows Server 2003 Standard Edition
  • Microsoft Windows Server 2003 Web Edition
  • Microsoft Windows Server 2003 R2 Datacenter Edition (32-Bit x86)
  • Microsoft Windows Server 2003 R2 Datacenter Edition (64-Bit x86)
  • Microsoft Windows Server 2003 R2 Enterprise Edition (32-Bit x86)
  • Microsoft Windows Server 2003 R2 Enterprise Edition (64-Bit x86)
  • Microsoft Windows Server 2003 R2 Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003 R2 Standard Edition (64-Bit x86)
  • Microsoft Windows Server 2003 Datacenter Edition
  • Microsoft Windows Server 2003, Datacenter x64 Edition
  • Microsoft Windows XP Professional x64 Edition
  • kbwinserv2003presp2fix kbexpertiseinter kbfix kbqfe kbmt KB919240 KbMtzh
反馈