Can I use playfile with the newer tool ICACL? WHat would be the command?

I had this question after viewing Newer Security translation tools alike subinacl for Windows 10.

Can I use playfile with the newer tool ICACL? WHat would be the command
creative555Asked:
Who is Participating?
 
QlemoConnect With a Mentor Batchelor, Developer and EE Topic AdvisorCommented:
icacls works on folders, MäckMesser, at least I never heard anything different. Anyway, it does not work here as registry permission changes are required too.
0
 
QlemoBatchelor, Developer and EE Topic AdvisorCommented:
You should be able to create something similar with /Save and /Restore options. It will only work for files, though.
0
 
Peter HutchisonSenior Network Systems SpecialistCommented:
I use a new tool called Setacl.exe to replace Subinacl. You can get it from https://helgeklein.com/setacl/.
1
Simple Misconfiguration =Network Vulnerability

In this technical webinar, AlgoSec will present several examples of common misconfigurations; including a basic device change, business application connectivity changes, and data center migrations. Learn best practices to protect your business from attack.

 
creative555Author Commented:
Does setacl works with Win 10? I have subinacle fail on Cortana folder all the time.

Below is where I need to add target user permissions:

This is from  Subinacle log.
+subkeyreg HKEY_USERS\S-1-5-21-727705047-903972831-1544914777-2009
/grant=S-1-5-21-3776012894-3702078199-3568858750-2039
+subkeyreg HKEY_USERS\S-1-5-21-727705047-903972831-1544914777-2009_Classes
/grant=S-1-5-21-3776012894-3702078199-3568858750-2039
+subkeyreg HKEY_USERS\S-1-5-21-727705047-903972831-1544914777-2009_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion
/replace=S-1-5-21-727705047-903972831-1544914777-2009=S-1-5-21-3776012894-3702078199-3568858750-2039
+keyreg HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-3776012894-3702078199-3568858750-2039
/grant=S-1-5-21-3776012894-3702078199-3568858750-2039=QSCEYLDA
+subdirectories C:\Users\luca.dellamore
/grant=S-1-5-21-3776012894-3702078199-3568858750-2039
+subdirectories C:\Users\luca.dellamore\*.*
/grant=S-1-5-21-3776012894-3702078199-3568858750-2039

What command do you use with the setacle tool? Does it do files and registry?
0
 
creative555Author Commented:
Actually, I have read the requirements for setacl and I didn't see Win 10 mentioned there. Did you test with Win 10 version?


System Requirements

SetACL works on all Windows NT based operating systems from Windows XP onwards. The newer, the better. This includes: Windows XP, Windows Server 2003 (R2), Windows Vista, Windows Server 2008, Windows 7 and Windows Server 2008 R2, Windows 8, Windows Server 2012.
0
 
McKnifeCommented:
Setacl works on win10.
Icacls does not work on folders, Qlemo? Here it does on folders but there are some effects that I find irregular, I will look into it again with more time.
0
 
McKnifeConnect With a Mentor Commented:
Cool Emu, why call me McMesser? Election day humor?
Ok, right, it is about registry keys, but still, icacls works on folders, I used it with save and restore. But for the registry, he should look at setacls, right.
0
 
creative555Author Commented:
thank you so much! So I should try icacls for folders with save and restore. But for the registry, I should look at setacls, right?

 I am new to scripting.  Could you pls suggest the command/switches that I should be running since you used these tools before.

thanks again.


I wonder if we are dealing with file locked for exclusive access when subinacle hangs...What do you think? How does those tools deal with locked files?
0
 
McKnifeCommented:
To be honest: don't ask for other to give you switches. Learn it. Don't rely on others in these matters. It is very easy and well-documented.
"Locked"? There's no indication of that. Could simply be a bug.
0
 
creative555Author Commented:
good comment. Thank you so much! I will try out and let you know the resutls
0
 
creative555Author Commented:
Still trying out. Will have the results today or tomorrow :)
0
 
creative555Author Commented:
thank you so much both! Yes. icacl worked!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.