Modifying ACLs from the command line

by Mitch Tulloch [Published on 5 June 2007 / Last Updated on 5 June 2007]

Using a script to modify permissions.

First there was cacls.exe, then xcacls.exe, then the dreaded and poorly-documented subinacl.exe. Each of these tools can be used in some fashion to view or modify access control lists (ACLs) i.e. permissions on files/folders on an NTFS volume. What you may not be aware of however is that Microsoft has released an updated version of xcacls that is actually a script instead of an executable. You can obtain xcacls.vbs from the Microsoft Download Center at and you can read about it further in KB 825751 which is found at

Mitch Tulloch was lead author for the Windows Vista Resource Kit from Microsoft Press, which is THE book for IT pros who want to deploy, maintain and support Windows Vista in mid- and large-sized network environments. For more information see

See Also

Featured Links