Modifying ACLs from the command line

by Mitch Tulloch [Published on 5 June 2007 / Last Updated on 5 June 2007]

Using a script to modify permissions.

First there was cacls.exe, then xcacls.exe, then the dreaded and poorly-documented subinacl.exe. Each of these tools can be used in some fashion to view or modify access control lists (ACLs) i.e. permissions on files/folders on an NTFS volume. What you may not be aware of however is that Microsoft has released an updated version of xcacls that is actually a script instead of an executable. You can obtain xcacls.vbs from the Microsoft Download Center at and you can read about it further in KB 825751 which is found at

Mitch Tulloch was lead author for the Windows Vista Resource Kit from Microsoft Press, which is THE book for IT pros who want to deploy, maintain and support Windows Vista in mid- and large-sized network environments. For more information see

The Author — Mitch Tulloch

Mitch Tulloch is a widely recognized expert on Windows administration, networking, and security. He has been repeatedly awarded Most Valuable Professional (MVP) status by Microsoft for his outstanding contributions in supporting users who deploy and use Microsoft platforms, products and solutions. Mitch has published over two hundred articles on different IT websites and magazines, and he has written or contributed to almost two dozen books and is lead author for the Windows 7 Resource Kit from Microsoft Press. For more information, see .

Latest Contributions

Featured Links