it is not on already.
COPY - This will turn off the Inheritance flag and
copy the Inherited ACL's
into Effective ACL's.
REMOVE - This will turn off the Inheritance flag and
will not copy the Inherited
ACL's. This is the opposite of ENABLE.
If switch is not present, /I will be ignored and
Inherited ACL's will remain untouched.
/L filename Filename for Logging. This can include a path name
if the file is not under the current directory.
File will be appended to, or created if it does not
exit. Must be Text file if it exists or error will occur.
If filename is omitted, the default name of XCACLS will
be used.
/Q Turn on Quiet mode. By default, it is off.
If it is turned on, there will be no display to the screen.
/DEBUG Turn on Debug mode. By default, it is off.
If it is turned on, there will be more information
displayed and/or logged. Information will show
Sub/Function Enter and Exit as well as other important
information.
/SERVER servername Enter a remote server to run script against.
/USER username Enter Username to impersonate for Remote Connections
(requires PASS switch). Will be ignored if it is for a Local Connection.
/PASS password Enter Password to go with USER switch
(requires USER switch).
Wildcard characters can be used to specify more than one file in a command, such as:
* Any string of zero or more characters
? Any single character
You can specify more than one user in a command.
You can combine access rights.
使用 Xcacls.vbs 查看权限
Xcacls.vbs 还可用于查看文件或文件夹的权限。 例如，如果您有一个名为 C:Test 的文件夹，在命令提示符处键入以下命令以查看文件夹权限，然后按 Enter：
xcacls.vbs c:test
下面的示例是一个典型结果：
C:>XCACLS.VBS c:test
Microsoft (R) Windows Script Host 5.6
版权所有 (C) Microsoft Corporation 1996-2001。保留所有权利。
Starting XCACLS.VBS (Version: 3.4) Script at 6/11/2003 10:55:21 AM
Startup directory:
"C:test"
Arguments Used:
Filename = "c:test"
**************************************************************************
Directory:C:test
Permissions:
Type Username Permissions Inheritance
Allowed BUILTINAdministrators Full Control This Folder, Subfolde
Allowed NT AUTHORITYSYSTEM Full Control This Folder, Subfolde
Allowed Domain1User1 Full Control This Folder Only
Allowed CREATOR OWNER Special (Unknown) Subfolders and Files
Allowed BUILTINUsers Read and Execute This Folder, Subfolde
Allowed BUILTINUsers Create Folders / Appe This Folder and Subfo
Allowed BUILTINUsers Create Files / Write This Folder and Subfo
No Auditing set
Owner:Domain1User1
注意：在该示例中，xcacls.vbs c:test 命令的输出与显示在图形用户界面 (GUI) 的文本一致。命令窗口的一些文字不完整。
