locked
Change permissions on Active Directory objects RRS feed

  • Question

  • Hi,

    How to add/change permissions on Active Directory objects?

    I want to add read/write permissions to "everyone" to a file. I hope there is a command as simple as

    attribute +R file

    to do that, instead of going through the GUI

    http://technet.microsoft.com/en-us/library/341b531b-a909-4bcf-b162-fd3104b7014e.aspx

    Thanks

    Friday, July 13, 2012 2:39 AM

Answers

  • You can use icacls:

    icacls foldername /grant everyone:(R)


    Grant Ward, a.k.a. Bigteddy

    • Marked as answer by smetah Friday, July 13, 2012 1:32 PM
    • Unmarked as answer by Bill_Stewart Tuesday, July 18, 2017 12:35 PM
    • Marked as answer by Bill_Stewart Tuesday, July 18, 2017 12:36 PM
    Friday, July 13, 2012 6:50 AM

All replies

  • You can use icacls:

    icacls foldername /grant everyone:(R)


    Grant Ward, a.k.a. Bigteddy

    • Marked as answer by smetah Friday, July 13, 2012 1:32 PM
    • Unmarked as answer by Bill_Stewart Tuesday, July 18, 2017 12:35 PM
    • Marked as answer by Bill_Stewart Tuesday, July 18, 2017 12:36 PM
    Friday, July 13, 2012 6:50 AM
  • perfect. thanks!
    Friday, July 13, 2012 1:32 PM
  • The original question was to change permissions on ACTIVE DIRECTORY objects. You should use dsacls instead if icacls. The latter works on files and folders.
    • Marked as answer by Bill_Stewart Tuesday, July 18, 2017 12:35 PM
    • Unmarked as answer by Bill_Stewart Tuesday, July 18, 2017 12:36 PM
    Tuesday, July 18, 2017 9:58 AM