{{Short description|Microsoft Windows and ReactOS native command line utility}} {{distinguish|text=calc.exe}} {{lowercase}} In Microsoft Windows, '''<code>cacls</code>''', and its replacement '''<code>icacls</code>''', are native command-line utilities that can display and modify the security descriptors on files and folders.<ref>{{cite web |title=Microsoft DOS cacls command |url=http://www.computerhope.com/cacls.htm |publisher=Computer Hope |access-date=24 December 2011}}</ref><ref>{{cite web |title=CACLS.exe |url=https://ss64.com/nt/cacls.html |publisher=SS64.com |access-date=24 December 2011}}</ref> An access-control list is a list of permissions for securable object, such as a file or folder, that controls who can access it. The <code>cacls</code> command is also available on ReactOS.
==cacls== {{Infobox software | name = cacls | logo = | screenshot = ReactOS-0.4.13 cacls command 667x674.png | screenshot size = | caption = The ReactOS <code>cacls</code> command | developer = Microsoft, Thomas Weidenmueller | released = {{Release year|df=yes|1994}} | latest release version = | latest release date = | operating system = Microsoft Windows, ReactOS | genre = Command | license = Windows: Proprietary commercial software<br />ReactOS: GNU Lesser General Public License | website = {{URL|https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/cacls}} }} The ''cacls.exe'' utility is a deprecated command line editor of directory and file security descriptors in Windows NT 3.5 and later operating systems of the Windows NT family.<ref>{{Cite web|url=https://www.computerhope.com/cacls.htm|title = MS-DOS and Windows command line calcs command}}</ref> Microsoft has produced the following newer utilities, some also subsequently deprecated, that offer enhancements to support changes introduced with version 3.0 of the NTFS filesystem: *''xcacls.exe''<ref>{{cite web|title=How to use Xcacls.exe to modify NTFS permissions (Revision: 4.5)|url=http://support.microsoft.com/kb/318754|work=Microsoft Support|publisher=Microsoft Corporation|access-date=24 December 2011|date=2 March 2007}}</ref><ref>{{cite web|title=Xcacls syntax|url=https://technet.microsoft.com/en-us/library/cc781299.aspx|work=Microsoft TechNet|publisher=Microsoft Corporation|access-date=30 October 2012|date=28 March 2003}}</ref><ref>{{cite web|title=Windows 2000 Resource Kit Tool: Xcacls.exe|url=http://www.microsoft.com/download/en/details.aspx?id=11096|work=Microsoft Download Center|publisher=Microsoft Corporation|access-date=24 December 2011|date=15 May 2002}}</ref><ref>{{cite web|title=Windows XP Service Pack 2 Support Tools|url=http://www.microsoft.com/download/en/details.aspx?id=18546|work=Microsoft Download Center|publisher=Microsoft Corporation|access-date=24 December 2011|date=10 August 2004}}</ref> is supported by Windows 2000 and later and adds new features like setting Execute, Delete and Take Ownership permissions *''xcacls.vbs''<ref>{{cite web|title=How to use Xcacls.vbs to modify NTFS permissions (Revision: 2.4)|url=http://support.microsoft.com/kb/825751|work=Microsoft Support|publisher=Microsoft Corporation|access-date=24 December 2011|date=30 October 2006}}</ref><ref>{{cite web|title=Extended Change Access Control List Tool (Xcacls)|url=http://www.microsoft.com/download/en/details.aspx?id=19419|work=Microsoft Download Center|publisher=Microsoft Corporation|access-date=24 December 2011|format=2 July 2004|quote=Xcacls.vbs is an unsupported tool that provides additional capabilities not provided with the supported utility, Xcacls.exe.}}</ref> *''fileacl.exe'' <ref>{{cite web|url=http://www.microsoft.com/downloads/details.aspx?FamilyID=723f64ea-34f0-4e6d-9a72-004d35de4e64&displaylang=en |title=FILEACL v3.0.1.6 |publisher=Microsoft |date=2004-03-23 |url-status=dead |archive-url=https://web.archive.org/web/20090322021106/http://www.microsoft.com/downloads/details.aspx?FamilyID=723f64ea-34f0-4e6d-9a72-004d35de4e64&displaylang=en |archive-date=March 22, 2009 }}</ref> *''icacls.exe'' (included in Windows Server 2003 SP2 and later)<ref>{{cite web|title=The Icacls.exe utility is available for Windows Server 2003 with Service Pack 2 (Revision: 4.0)|url=http://support.microsoft.com/kb/919240|work=Microsoft Support|publisher=Microsoft Corporation|access-date=24 December 2011|date=9 October 2011}}</ref><ref>{{cite web|title=Icacls|url=https://technet.microsoft.com/en-us/library/cc753525%28WS.10%29.aspx|work=Microsoft TechNet|publisher=Microsoft Corporation|access-date=24 December 2011|date=28 September 2007}}</ref> *''SubInAcl.exe'' - Resource Kit utility to set and replace permissions on various type of objects including files, services and registry keys *''Windows PowerShell'' (Get-Acl<ref>{{cite web|title=Get-Acl|url=https://technet.microsoft.com/en-us/library/dd347635.aspx|work=Microsoft TechNet|publisher=Microsoft Corporation|access-date=31 October 2012|date=21 April 2010}}</ref> and Set-Acl<ref>{{cite web|title=Set-Acl|url=https://technet.microsoft.com/en-us/library/dd315261.aspx|work=Microsoft TechNet|publisher=Microsoft Corporation|access-date=31 October 2012|date=21 April 2010}}</ref> cmdlets)
The ReactOS version was developed by Thomas Weidenmueller and is licensed under the GNU Lesser General Public License.<ref>{{GitHub|https://github.com/reactos/reactos/blob/master/base/applications/cacls/cacls.c}}</ref>
==icacls== {{Infobox software | name = icacls | logo = | screenshot = | screenshot size = | caption = | developer = Microsoft | released = {{Release year|df=yes|2007}} | latest release version = | latest release date = | operating system = Microsoft Windows | genre = Command | license = Proprietary commercial software | website = {{URL|https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls}} }} Stands for Integrity Control Access Control List.{{Citation needed|date=July 2022}} Windows Server 2003 Service Pack 2 and later include ''icacls'', an in-box command-line utility that can display, modify, backup and restore ACLs for files and folders, as well as to set integrity levels and ownership in Vista and later versions.<ref>[https://www.computerhope.com/icacls.htm MS-DOS and Windows command line icacls command]</ref> It is not a complete replacement for ''cacls'', however. For example, it does not support Security Descriptor Definition Language (SDDL) syntax directly via command line parameters (only via the /restore option).
==See also== * SetACL * chmod * takeown
==References== {{Reflist}}
==Further reading== {{Refbegin}} *{{cite web|title=Cacls|url=http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/cacls.mspx?mfr=true|work=Microsoft Windows XP Professional Product Documentation|publisher=Microsoft Corporation|access-date=24 December 2011}} *{{cite web|title=Xcacls Overview|url=https://technet.microsoft.com/en-us/library/cc758217%28WS.10%29.aspx|work=Microsoft TechNet|publisher=Microsoft Corporation|access-date=24 December 2011|date=28 March 2003}} *{{cite web|title=DACLs and ACEs|url=http://msdn.microsoft.com/en-us/library/aa446597%28VS.85%29.aspx|work=Microsoft Developers Network|publisher=Microsoft Corporation|access-date=24 December 2011|date=15 November 2011}} *{{cite web|first=Tony|last=Bradley|title=Introduction to Windows Integrity Control|url=https://community.broadcom.com/symantecenterprise/communities/community-home/librarydocuments/viewdocument?DocumentKey=2e7efdd7-def6-4b1b-995a-e68b328b6f27&CommunityKey=1ecf5f55-9545-44d6-b0f4-4e4a7f5f5e68&tab=librarydocuments|work=SecurityFocus|publisher=Symantec|access-date=24 December 2011|date=2 November 2010}} *[http://blogs.technet.com/b/askds/archive/2008/04/18/the-security-descriptor-definition-language-of-love-part-1.aspx The Security Descriptor Definition Language of Love (Part 1)] {{Refend}}
==External links== {{Wikibooks|Guide to Windows Commands}} * [https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/cacls_1 cacls | Microsoft Docs] * [https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls icacls | Microsoft Docs]
{{Windows commands}}
Category:ReactOS commands