Hallo there!
I have a problem with SetACL. I'm trying to set permissions for user at c:\, the syntax I'm using is:
SetACL.exe -on "C:" -ot file -actn ace -ace "n:user;p:Read_ex" but nothing happendes to the permissions.
When I'm doing it for exampla o´n C:\peogram files it works allright. Any ideas someone?
0 Comments   [ - ] Hide Comments


Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
Answer this question or Comment on this question for clarity


Why not make the users local admin as that would produce similar result.
Try to find out what exactly you need to open up.
Answered 05/05/2008 by: AngelD
Red Belt

  • I would like to know, why you wish to give permission to complete systemDrive, unless you have a locked down environment. If SetACL is failing, did u try it out with Cacls.exe which comes inbuilt in windows
Please log in to comment
The problem is that SetACL must be passed a full path, not a drive letter:

. SetACL.exe -on "C:\" -ot file -actn ace -ace "n:user;p:Read_ex"

However, I, like Kim (AngelD), am confused about how your users don't already have ReadExecute rights on the root of C:. You need to tread carefully here. I suggest some reading on Windows permissions would be a good starting point.
Answered 05/06/2008 by: VBScab
Red Belt

Please log in to comment
Your example will not work. Try something like that:

SetACL.exe -on "C:\\" -ot file -actn ace -ace "n:S-1-5-32-545;p:add_file;s:y;m:grant;i:np"
Processing ACL of: <\\?\C:\>
SetACL finished successfully.

cu Flo
Answered 06/25/2008 by: flo
Senior Yellow Belt

Please log in to comment