China DOS Union

http://support.microsoft.com/kb/825751

Examples

The following Xcacls.vbs commands provide some examples of Xcacls.vbs usage:

xcacls.vbs c:\test\ /g domain\testuser1:f /f /t /e
This command edits existing permissions. It grants Domain\TestUser1 full control over all files under C:\Test, traverses subfolders under C:\Test, and then changes all found files. This command does not touch directories.

xcacls.vbs c:\test\ /g domain\testuser1:f /s /l "c:\xcacls.log"
This command replaces existing permissions. It grants Domain\TestUser1 full control over all subfolders under C:\Test and logs to C:\Xcacls.log. This command does not touch files and does not traverse directories.

xcacls.vbs c:\test\readme.txt /o "machinea\group1"
This command changes the owner of the readme file to group MachineA\Group1.

xcacls.vbs c:\test\badcode.exe /r "machinea\group1" /r "domain\testuser1"
This command revokes the permissions of MachineA\Group1 and Domain\TestUser1 on C:\Test\Badcode.exe.

xcacls.vbs c:\test\subdir1 /i enable /q
This command enables inheritance on folder C:\Test\Subdir1. This command suppresses any screen output.

xcacls.vbs \\servera\sharez\testpage.htm /p "domain\group2":14
This command remotely connects to \\ServerA\ShareZ using Windows Management Instrumentation (WMI). Then it obtains the local path for the share, under which it changes the permissions on Testpage.htm. It preserves the existing permissions of Domain\Group2 but adds permissions 1 (read data) and 4 (read extended attributes). This command drops other permissions on this file because the /e switch is not used.

xcacls.vbs d:\default.htm /g "domain\group2":f /server servera /user servera\admin /pass password /e
This command remotely connects to ServerA as ServerA\Admin using WMI, then grants full permissions to Domain\Group2 on Default.htm. The existing permissions of Domain\Group2 are lost, but other permissions on the file are retained.

I still don't understand what the maximum function of this is compared to cacls?

Not knowing code and English, but wanting to learn P processing, it's difficult, dizzy

Why is this so complicated? Can you explain it more simply? I'm completely confused. It seems I still need to work hard to master this knowledge. :(

Why can't I download directly? It's really frustrating. I still need points!

Can I just put it out directly?? I want to learn batch processing
But now I have no points. I'll give it to you later~~~~ ~!~

Is this benefit that there's no need for confirmation?

Looking for issues with batch processing to set permissions, thank you to the楼主.

Develop good habits, give a thumbs-up after downloading

The following are some examples of Xcacls.vbs commands showing how to use Xcacls.vbs:

xcacls.vbs c:\test\ /g domain\testuser1:f /f /t /e
This command edits existing permissions. It grants Domain\TestUser1 full control over all files under C:\Test, traverses subfolders under C:\Test, and then changes all found files. This command does not touch directories.

xcacls.vbs c:\test\ /g domain\testuser1:f /s /l "c:\xcacls.log"
This command replaces existing permissions. It grants Domain\TestUser1 full control over all subfolders under C:\Test and logs to C:\Xcacls.log. This command does not touch files and does not traverse directories.

xcacls.vbs c:\test\readme.txt /o "machinea\group1"
This command changes the owner of the readme file to group MachineA\Group1.

xcacls.vbs c:\test\badcode.exe /r "machinea\group1" /r "domain\testuser1"
This command revokes the permissions of MachineA\Group1 and Domain\TestUser1 on C:\Test\Badcode.exe.

xcacls.vbs c:\test\subdir1 /i enable /q
This command enables inheritance on folder C:\Test\Subdir1. This command suppresses any screen output.

xcacls.vbs \\servera\sharez\testpage.htm /p "domain\group2":14
This command remotely connects to \\ServerA\ShareZ using Windows Management Instrumentation (WMI). Then it gets the local path for this share, and under this path, it changes the permissions on Testpage.htm. It preserves the existing permissions of Domain\Group2 as is, but adds permission 1 (read data) and permission 4 (read extended attributes). This command discards other permissions on this file because the /e switch is not used.

xcacls.vbs d:\default.htm /g "domain\group2":f /server servera /user servera\admin /pass password /e
This command uses WMI to remotely connect to ServerA as ServerA\Admin, and then grants full permissions on Default.htm to Domain\Group2. The existing permissions of Domain\Group2 are lost, but other permissions on the file are retained.