Icacls, syntax question.

What do you mean by interactive user? If you mean the currently logged in user, then this syntax will not work. With this command, you need to repeat it and explicitly name each user for whom you wish to grant rights to.

Dwarf said:

What do you mean by interactive user? If you mean the currently logged in user, then this syntax will not work. With this command, you need to repeat it and explicitly name each user for whom you wish to grant rights to.

The syntax icacls folder1 /grant *S-1-5-4:(M), should work.

Here you can read some more about Windows security identifiers,
http://technet.microsoft.com/en-us/l...8WS.10%29.aspx

I'm not particularly familiar with this command. However, do you have a sub-key in the registry under HKEY_USERS called S-1-5-4? See if the syntax works with one of the keys that is there. I suggest S-1-5-21.

Strange. I've just tried it on a dummy folder, and it appears to have worked.

Code:

Microsoft Windows [Version 6.2.7955]
Copyright (c) 2011 Microsoft Corporation.  All rights reserved.

C:\Windows\system32>icacls c:\users\cyclops\desktop\test /grant cyclops:(m)
processed file: c:\users\cyclops\desktop\test
Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>icacls c:\users\cyclops\desktop\test /grant *S-1-5-4:(m)
processed file: c:\users\cyclops\desktop\test
Successfully processed 1 files; Failed processing 0 files

C:\Windows\system32>

You're welcome. Did you find out what was causing the error? I'm guessing something in the syntax.

Ahh, I think I get it now. You mean you needed to substitute *S-1-5-4 for INTERACTIVE, correct?