?
Solved

How to restore CACLS to default state?

Posted on 2007-11-14
3
Medium Priority
?
1,491 Views
Last Modified: 2010-04-21
Computer has Windows XP Pro, SP 2 with all updates and two user accounts.  One account is ADMIN with administrator status and the other is USER with limited access status.  My friend "who knows about computers" and he used CACLS from the command prompt to allow USER full control over a single directory.  Now, he wants to change it back and restore USER to admin status also.

He THINKS the command he used was this:  cacls PROGRAMNAME /t /e /c /g USER:f

How can we put the permissions back to a default or pre-change state?
0
Comment
Question by:plt63640
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 4

Accepted Solution

by:
tmwest earned 1000 total points
ID: 20283522
You could remove the explicit permissions that were granted.  The folder would then inherit it's permissions from it's parent, like it was before.  If they were not inherited from the parent then they are gone.  In the future you can use subinacl to export the current acls before making a change.

http://www.microsoft.com/downloads/details.aspx?FamilyID=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en
0
 
LVL 66

Assisted Solution

by:johnb6767
johnb6767 earned 1000 total points
ID: 20285567
Why not just use the Security tab on the folder properties? If it is not showing, disable Simple File Sharing.

Just remove everything for the USERS group other than...

Read and Execute
List Folder Contents
Read....
0
 
LVL 3

Author Closing Comment

by:plt63640
ID: 31409222
Thanks for the quick response.  Changing USERs account type back to "computer administrator" cured my problem.  Your solutions were very applicable, so I've split the points between the both of you for your effort and  haste in providing a reply.
0

Featured Post

Don't Cry: How Liquid Web is Ensuring Security

WannaCry is just the start. Read how Liquid Web is protecting itself and its customers against new threats.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Determining the an SCCM package name from the Package ID
In this post we will be converting StringData saved within a text file into a hash table. This can be further used in a PowerShell script for replacing settings that are dynamic in nature from environment to environment.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question