Navigating the File System Permission Jungle

Checking Permissions from the Command Line
Administrators often use command-line tools such as subinacl.exe, xacls.exe, and cacls.exe when checking NTFS permissions. Subinacl is part of the Windows Server 2003 Resource Kit Tools, or you can download it separately at http://www.microsoft.com/downloads/details.aspx?familyid=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en. You can use Subinacl on Windows 2000 and later to view and modify NTFS permissions on files, folders, objects, registry keys, and services. Most importantly, you can use Subinacl to copy the permissions of one user, group, or object and apply them to another user, group, or object in the same or another domain. For example, if you move a user from one domain to another, Windows creates a new user account; any previously existing SIDs or permissions attached to the original user are gone. You can use Subinacl to copy permissions to the new user account to make them identical. Xcacls, which functions similarly to Subinacl, is available in the Windows 2000 Server Resource Kits, or you can download it separately at http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/xcacls-o.asp. . . .