Solved

How to restore CACLS to default state?

Posted on 2007-11-14
3
1,467 Views
Last Modified: 2010-04-21
Computer has Windows XP Pro, SP 2 with all updates and two user accounts.  One account is ADMIN with administrator status and the other is USER with limited access status.  My friend "who knows about computers" and he used CACLS from the command prompt to allow USER full control over a single directory.  Now, he wants to change it back and restore USER to admin status also.

He THINKS the command he used was this:  cacls PROGRAMNAME /t /e /c /g USER:f

How can we put the permissions back to a default or pre-change state?
0
Comment
Question by:plt63640
3 Comments
 
LVL 4

Accepted Solution

by:
tmwest earned 250 total points
ID: 20283522
You could remove the explicit permissions that were granted.  The folder would then inherit it's permissions from it's parent, like it was before.  If they were not inherited from the parent then they are gone.  In the future you can use subinacl to export the current acls before making a change.

http://www.microsoft.com/downloads/details.aspx?FamilyID=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en
0
 
LVL 66

Assisted Solution

by:johnb6767
johnb6767 earned 250 total points
ID: 20285567
Why not just use the Security tab on the folder properties? If it is not showing, disable Simple File Sharing.

Just remove everything for the USERS group other than...

Read and Execute
List Folder Contents
Read....
0
 
LVL 3

Author Closing Comment

by:plt63640
ID: 31409222
Thanks for the quick response.  Changing USERs account type back to "computer administrator" cured my problem.  Your solutions were very applicable, so I've split the points between the both of you for your effort and  haste in providing a reply.
0

Featured Post

Promote certifications in your email signature

Has your company recently won an award or achieved a certification? They'll no doubt want to show it off. Email signature images used to promote certifications & awards can instantly establish credibility with a recipient and provide you with numerous benefits.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently Microsoft released a brand new function called CONCAT. It's supposed to replace its predecessor CONCATENATE. But how does it work? And what's new? In this article, we take a closer look at all of this - we even included an exercise file for…
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now