设置高级NTFS权限的工具 XCACLS.vbs

2019-01-30 16:02:34王振洲

/L filename Filename for Logging. This can include a path name
if the file is not under the current directory.
File will be appended to, or created if it does not
exit. Must be Text file if it exists or error will occur.

If filename is omitted, the default name of XCACLS will
be used.

/Q Turn on Quiet mode. By default, it is off.
If it is turned on, there will be no display to the screen.


/DEBUG Turn on Debug mode. By default, it is off.
If it is turned on, there will be more information
displayed and/or logged. Information will show
Sub/Function Enter and Exit as well as other important
information.

/SERVER servername Enter a remote server to run script against.

/USER username Enter Username to impersonate for Remote Connections
(requires PASS switch). Will be ignored if it is for a Local Connection.

/PASS password Enter Password to go with USER switch
(requires USER switch).


Wildcard characters can be used to specify more than one file in a command, such as:
* Any string of zero or more characters
? Any single character

You can specify more than one user in a command.
You can combine access rights.

使用 Xcacls.vbs 查看权限

Xcacls.vbs 还可用于查看文件或文件夹的权限。 例如,如果您有一个名为 C:Test 的文件夹,在命令提示符处键入以下命令以查看文件夹权限,然后按 Enter:
xcacls.vbs c:test
下面的示例是一个典型结果:

C:>XCACLS.VBS c:test
Microsoft (R) Windows Script Host 5.6
版权所有 (C) Microsoft Corporation 1996-2001。保留所有权利。

Starting XCACLS.VBS (Version: 3.4) Script at 6/11/2003 10:55:21 AM

Startup directory:
"C:test"

Arguments Used:
Filename = "c:test"



**************************************************************************
Directory:C:test

Permissions:
Type Username Permissions Inheritance

Allowed BUILTINAdministrators Full Control This Folder, Subfolde
Allowed NT AUTHORITYSYSTEM Full Control This Folder, Subfolde
Allowed Domain1User1 Full Control This Folder Only
Allowed CREATOR OWNER Special (Unknown) Subfolders and Files
Allowed BUILTINUsers Read and Execute This Folder, Subfolde
Allowed BUILTINUsers Create Folders / Appe This Folder and Subfo
Allowed BUILTINUsers Create Files / Write This Folder and Subfo

No Auditing set

Owner:Domain1User1

注意:在该示例中,xcacls.vbs c:test 命令的输出与显示在图形用户界面 (GUI) 的文本一致。命令窗口的一些文字不完整。

输出还给出了脚本的版本、启动目录和使用的参数。

您还可以使用通配符来显示目录下匹配的文件。例如,如果键入以下命令,将会显示 C:Test 文件夹中所有具有“.log”扩展名的文件:
相关文章 大家在看