Icacls Folder Permission Problem

Hi,
I am using icacls within a VBScrpt specifically to change permissions to a folder.
My attempts so far only seems to change the security of only the files within the folder and subfolders, which is only half of what I need.
I wonder if there is a parameter or anything that I'm missing that will change the security of the subfolders?
I am using this:
icacls "%ProgramFiles(x86)%\RKYV" /grant "Users":f /t /q
Any illumination would be greatly appreciated.
Many thanks.

... I was expecting to see a tick within the Full Control category and didn't expect to change the Special Permission category (I don't even know what the Special Permissions category is ...
Hi,
As Forest has explained, Special Permission refers to a combination of permission (usually deviate from standard) and will become visible when you clicked the
Advanced button.
In your case, your command line has treated the folders and files separately. For folders, it grants
Full Control to This folder only as shown above.
You have mentioned that you expected a tick within the Full Control category. Yes, it can be achieved by changing the command line as follows:
icacls "%ProgramFiles(x86)%\RKYV" /grant "Users":(OI)(CI)f /t /q
where CI = Container Inherit, and OI = Object Inherit.
Hope that helps. I have learnt this command because you asked :)
Cheers,
Tas Chew

Similar Messages

File /folder permission problem

Hi,
I have a share on server 2012 R2 with FULL ACCESS. Now I have problem to write in it when I mounted the network share on a PC booted with WinPE. Even I mounted the share with Administrator Account.
Effective permissions and ownership details seems to look fine.
Have deleted the user and created a new user account , still same problem ,,, isn't it odd? Has someone faced same?
N.A.Malik

Hello,
When you try to write in this folder, did you get any error message?
I want to confirm the administrator account is a domain accout or local account.
Personally, I think it is still a permission issue.
For test, give everyone full confrol for both share permission and NTFS permission.

Quicktime Windows 7 64bit folder permission problem

Hi!
I am trying to install quicktime (actually just need iTunes..but then iTunes needs qt), but it fails. There seems to be a problem with the folder C:\Program Files(x86)\QuickTime\ - Quick Time wants to write the file QTTask.exe, but complains that it does not have permission to do so. Same thing happens with \PropertyPanels\PanelHelperBase.qpa
I have tried deleting all Apple programs (in the order suggested in the support forum) and also tried to delete the temp folder. That did not work.
I have tried to manually adjust the permissions of the QuickTime folder - no effect.
I have run the installation file with admin rights and with different compatibility modes to no effect.
I consider myself to be an experienced user - able to solve most problems - but now I am stuck. I need some input / fresh ideas on how to tackle the problem.
This is very annoying as I cannot sync iPhone/iPad/iPod while iTunes is not running - due to the stupid (sorry) idea of only have your device linked to one library.
Please help.
Thanks!

There seems to be a problem with the folder C:\Program Files(x86)\QuickTime\ - Quick Time wants to write the file QTTask.exe, but complains that it does not have permission to do so. Same thing happens with \PropertyPanels\PanelHelperBase.qpa
That's consistent with disk/file damage.
Let's first try running a chkdsk over your C drive. There's Windows 7 instructions in the following document. Select both "automatically fix file system errors" and "scan for and attempt recovery of bad sectors" or use chkdsk /r (depending on which way you choose to go about things). You should be prompted to schedule the scan to run on restart. That sort of scan of the C drive should take a long time ... if it quits after a few minutes or seconds, something's interfering with the scan:
http://www.w7forums.com/use-chkdsk-check-disk-t448.html (How to use CHKDSK (Check Disk))
Does the chkdsk find/repair any damage? If so, does an itunes install go through properly this time?

[MX 2004} Can't upload! The file may not exist, or there could be a permission problem

I'm running MX 2004 on Windows XP. All's been well for the
last few months, doing site maintenance at this part-time job. I
get tangled up a bit in checking files in and out, coming from
GoLive, and since there's no one else with FTP access, yesterday I
told it to check the entire site in. I didn't have any changes I
didn't want to commit, and I figured that would keep things a
little neater.
As of today, I can post revisions to existing pages, or
resize image files, but when I create a new page, or try to place a
new image file on an existing page, I can't upload it.
So, to be clear: I have two pages already up on the site,
index.html and apple.html, with a link between them. If I create
new page banana.html and make a link to it from index, index.html
will upload that revised link, but banana.html is refused with the
message
FTP error: The file may not exist, or there could be a
permission problem
I know the file doesn't exist (remotely); I just made it.
I've gone to Prefs and disable Check In / Check Out, which didn't
do me any good. What next?

Can you open the FTP log, select one of these new files and
upload it- then
cut and paste relevant part of the ftp log?
Also- does this site have a "host directory", a subfolder
that your public
files need to go into? If yes- is this folder listed in the
host directory
line of the remote server info?
And odd past thing i've seen-
Had hosting that used public_html as the public folder name.
They also had a symbolic link named www that pointed to
public_html
Could upload/download existing files with www in "host
directory" line of
dw; but could not upload new files or work with files in
subfolders.
changing to public_html instead of the www symlink fixed this
for me.
Alan
Adobe Community Expert, dreamweaver
http://www.adobe.com/communities/experts/

Looking for a way to solve permission problem in windows 7

one of the biggest problems i have with this windows that even that i'm an administrator and the owner of the computer i always have permission problems folders i get a no access errors with files and folders even thoughe i should have full permisions i belive system restore doesn't work for me because permissions problem and i don't know what to do anymore i'v used uac i'v disable uac i downloaded a registry file to take owernship on files and folders and still problems so what can i do to solve all this problems?
and to be honest i really don't like the way windows 7 behave with permisions this is my computer and i am an administrator why do i have to fight to access folders like System Volume Information,Recovery,Documents and Settings why do i get the lock icon when i take owenership and i'm on the users list but when i add users everyting is fine?
10x in advance.:)

Hello,
This is by design. You cannot access the folder or files are protected by operation system even if your current user account is Administrator.
System Volume Information is a hidden and protected system folder that the System Restore tools uses to store it information and restore points.
In Recovery folder, there are two files: Winre.wim and boot.sdi. With these two files, you are able to boot the system to Windows Recovery Environment (WinRE) and do a repair without inserting a Windows 7 installation disc.
If you want to access the protected folders like “System Volume Information”, use the following method, but I do not recommend you do this. It may cause some potential problems:
1. Right click the System Volume Information folder and choose Properties.
2. In Security tab, click Edit and then click Add. Type in “everyone”(without quote) and click Ok.
3. Then “Everyone“ will be listed under ” Group or user names”, click Everyone, and check “allow” full control option.
As BurrWalnut said, the “Documents and Settings”, it is a junction. A junction point is also a protected operating system folder that points to another folder. The junction point is an important part of application compatibility and does not contain any data or other files. In Windows Vista and Windows 7, the “Documents and Settings” folder has been replaced with “Users” folder. All of your user profiles are saved in C:\Users\User name folder.
Thomas Lin

How do i fix this: error message- index.html - error occurred - An FTP error occurred - cannot put index.html. Access denied. The file may not exist, or there could be a permission problem. Make sure you have proper authorization on the server and the ser

that is...
index.html - error occurred - An FTP error occurred - cannot put index.html. Access denied. The file may not exist, or there could be a permission problem. Make sure you have proper authorization on the server and the server is properly configured.
File activity incomplete. 1 file(s) or folder(s) were not completed.
Files with errors: 1
index.html
thanks!

It's under More Options triangle in the Manage Sites panel. See screenshot:
Nancy O.

Permission Problems Since Clean Install of Mt. Lion

I did a clean install of Mountain Lion last month. I reinstalled all my apps from freshly downloaded installers, rather than copy anything to my pristine system folder. I copied my music, photos, and other documents from my Time Machine drive. Now, I have constant permission problems on all these folders. I don't have permission to do anything to any of these folders or subfolders. I can't rip a CD to iTunes, I can't sync my iPhone. I can't download anything. I can change the permission on each folder individually, but there must be thousands of them. There must be an easier way. Changing permissions for a parent folder doesn't change the subfolders. Disk Utility reports no problems when I repair disk permissions. Thanks in advance for any help.
Also, the iPhoto app disappeared after the clean install. I don't know how to re-install it. Do I have to wipe my drive clean again and install Leopard from my original DVD that came with my iMac? That would be a huge job to get back to Mountain Lion. I'll post this question in another thread and link it here.

Back up all data.
This procedure will unlock all your user files (not system files) and reset their ownership and access-control lists to the default. If you've set special values for those attributes on any of your files, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it.
Step 1
If you have more than one user account, and the one in question is not an administrator account, then temporarily promote it to administrator status in the Users & Groups preference pane. To do that, unlock the preference pane using the credentials of an administrator, check the box marked Allow user to administer this computer, then reboot. You can demote the problem account back to standard status when this step has been completed.
Triple-click the following line to select it. Copy the selected text to the Clipboard (command-C):
{ sudo chflags -R nouchg,nouappnd ~ $TMPDIR.. ; sudo chown -Rh $UID:staff ~ $_ ; sudo chmod -R u+rwX ~ $_ ; chmod -R -N ~ $_ ; } 2> /dev/null
Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Paste into the Terminal window (command-V). You'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.
The command will take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear, then quit Terminal.
Step 2
Boot into Recovery by holding down the key combination command-R at startup. Release the keys when you see a gray screen with a spinning dial.
When the OS X Utilities screen appears, select
Utilities ▹ Terminal
from the menu bar. A Terminal window will open.
In the Terminal window, type this:
resetpassword
That's one word, all lower case, with no spaces. Then press return. A Reset Password window will open. You’renot going to reset a password.
Select your boot volume ("Macintosh HD," unless you gave it a different name) if not already selected.
Select your username from the menu labeled Select the user account if not already selected.
Under Reset Home Directory Permissions and ACLs, click the Reset button.
Select
 ▹ Restart
from the menu bar.

Lightroom catalog permission problem!

Hi everyone,
please help me solve this problem. I reinstall OS X last night to new Yosemite. I did clean install. I made TM backup of my old OS X on external LaCie hdd. I copied my catalog from the backup into my pictures folder on an internal hdd. When I tried to open it this message pops up "Lightroom cannot use the catalog named “Lightroom 5 Catalog” because it is not writable and cannot be opened.". Just to be clear the "get info" permissions are set for "Me" R/W. I don't have any different file inside the folder "pictures" only my catalog.ircat. I can't open original file from the LaCie backup, also permission problem. Thanks for help.

it's all ok. The file for some reason have some info written about the owner. I did change that but it does not matter and still don't work. If I want rename the file then I have to put the password and that is why LR can't work with it. I found the solution already (after 5 hours searching the internet) This helped me http://backdrift.org/fixing-mac-osx-file-permissions-and-acls-from-the-command-line I used sudo chmod -N /here is path to the file/ and enter. This solved all my trouble and I can open the catalog without problems.

"Operation Failed. The resource is not a directory, or there might be a permission problem"

I am trying to edit a role setting but when i click on "Edit
Role Settings" it pops up a message:
"Operation Failed. The resource is not a directory, or there
might be a permission problem"
As suggested in a previous thread, I ran FTPServerChecker and
only received two errors. Neither of them applied to me as I am
using contribute 3 and one error was for contribute 2. The other
said to ignore the error if you are using a windows server, which I
am. What can I do to get this working? Thanks. Here is the log from
FTPServerChecker if that helps:
NOTE: "Serv-U FTP server" has been detected.
There is a known issue reported with Contribute 2.0 and
Serv-U server.
If you are using Contribute 2.0, please download a patch from
here
http://www.macromedia.com/support/contribute/ts/documents/servu.htm
Login: SUCCESS!
Directory Listing Test: SUCCESS!
Make Directory Test: SUCCESS!
Change Directory Test: SUCCESS!
Upload a File Test: SUCCESS!
Fallback Test for Optimization: SUCCESS!
Server State Test: SUCCESS!
File/Directory NameExists Test: SUCCESS!
File/Directory NOT Exists Test: SUCCESS!
TimeStamp Test: SUCCESS!
Rename Test: SUCCESS!
Move File To Sub Dir Test: SUCCESS!
Move File To Parent Dir Test: SUCCESS!
Change Permission test: Error.
If your FTP server runs on windows operating system, you may
ignore this error.
If your FTP server runs on UNIX based operating system,
please check file/directory
permissions.
If you are using an anonymous or guest account, you might not
have privileges to
change permissions. Please check with your server
administrator.
-------------------------------- FTP log from the last
operation -------------------------------
> CWD /c:/websites/aaa/mm_diagnose
< 250 Directory changed to /c:/websites/aaa/mm_diagnose
> SITE CHMOD 755 rename_test3_parent_.mm
< 501 SITE option not supported.
> CWD
/c:/websites/aaa/mm_diagnose/rename_test3_parent_.mm
< 550
/c:/websites/aaa/mm_diagnose/rename_test3_parent_.mm: No such file
or directory.
> CWD /c:/websites/aaa/mm_diagnose
< 250 Directory changed to /c:/websites/aaa/mm_diagnose
> RNFR rename_test3_parent_.mm
< 350 File or directory exists, ready for destination
name
> ABOR
< 226 ABOR command successful.
Cleaning Test File: SUCCESS!
Cleaning Test Directory: SUCCESS!
Cleaning Test Directory: SUCCESS!

Ken Jacobs wrote:
> One of our clients is receiving this error message when
using Contribute 3 to
> publish any page on their website.
>
> I followed the instructions in the support center to
enable logging. When I
> looked at the log I noticed that there was an
ACCESS_DENIED message when trying
> to retrieve the file /www/home/news.html.LCK
>
> I checked the FTP server and I cannot find any trace of
the lock file that is
> mentioned in the error message.
>
> What is causing this message?
>
Not sure why this is happening... Try to create a copy of
this page and
try using it as a work around until then. Further more, look
at the
access privileges for the folder on your site.. you should
have proper
privileges..

Cannot restore Mail from time Machine - permission problems

I am running Lion 10.7.2 and mail 5.1 (all software updates applied)
I know there is a fair bit referencing similar problems but I cannot find my solution.
I inadvertantly deleted a mail account and simply wish to restore the account from my time machine backups.
Time machine has been reliable in the past and my put my faith in it. However this problem now introduces a fair bit of mistrust which should never happen with a backup system.
I navigate to ~/library/Mail/V2 and then open time machine and select a known good backup (I hope).
I highlight the time machine account folder I want to restore and select "restore".
Time machine starts the restore normally but very quickly comes up with this mesage -
"The operation can’t be completed because you don’t have permission to access “.mboxCache.plist”.
(I am logged on as admin)
I have repaired permission on my HD to no avail.
I assume that the message refers to the time machine file but any attempt at changing permisions on the time machine backups fails as "not permitted" (I would not be surprised at this anyway as I dont know how the time machine file system works).
I then copied my complete mail folder to another disk and deleted the original and tried to restore the complete mail folder from the time machine backup.
A similar permissions error message occurs but on a different file.
I am getting nowhere and am rapidly losing faith in time machine - I totally rely on it.
Can anyone help please.

I deleted the account using mail preferences, so following your advise:
I restored the pref file from the good known backup date.
I also used disk utility to repair the time machine backup volume which showed no problems.
First of all, restoring from time machine according to FAQ 15, the actual messages in the deleted account were indeed restored to the new mailbox that time machine created and could be viewed - that is fine and solves the problem of lost mail.
Almost solved - but what I was trying to do was :
I had two accounts which show under inbox and when you "get mail" the little whirling indicator shows activity which my wife (and I) liked. After I deleted the second (now unused account) there is no more indicator when "getting mail" and it is not obvious that anything is actually happening. Any mail received will show up under mail activity but if there is none we all just sit there with no feedback until it "beeps".
There was also the other issue of maybe wanting to get back all mail for the deleted account (which you solved).
I can of course recreate the account as a new one but I thought time machine would be able to restore the mail system back to where it was (as it should) - it seems it may not be able to which is not nice as in "what else will fail one day that I dont know about". To restore "as was" is why I tried to restore just the "missing" folder in ~/library/mail/v2 but keep running into these permission problems.
Time machine was the best backup system I have seen in over 30 years in computing but if it now "doesnt" under all circumstances it becomes useless and we will have to go back to manual or other backup systems. Surely Apple will fix it - a backup and restore system has to completely reliable or not at all.
I thank you for your help and, as I say, there is no real urgency as mail items can actually be recovered - it would be nice to be able to restore "as it was" however.

Set Folder Permission with CSV File

I currently have a batch file that I use to set the folder permission on a users folder. The batch file of course requires me to manually set two variables. I'd like to have a master csv file containing this info and a powershell script to allow
me to set these permission much more quickly. Here's my current batch file:
Set User=123A
Set Folder=123
icacls C:\Data\%folder% /grant %user%:(OI)(CI)F
My csv file would appear as 123A,123
I did do a search and found a few posts on this subject, but couldn't wrap my head around how to modify them to fit my needs.
Kevin

FOR /F "eol=; tokens=1,2* delims=, " %%i in (myfile.txt) do icacls C:\Data\%%j /grant %%i:(OI)(CI)F
¯\_(ツ)_/¯

Folder permission macmini server 10.6.8 help

I own and run a small office, and i've just changed from a windows small business server who worked rocksteady, to a new mac mini server 10.6.8, because most of us use mac's.
I hired a macsepsecialist to configure and set up the server for the 6 of us. He has tried to solve our problem for 3 months now, and we still have the same problem.
When one of us creates a new folder og file inside a projectfolder on the server, it should get the same permission as the projectfolder so it is accessible to all of us. This was no problem on the windowsserver. This does not happen on the macminiserver. Only the guy who creates the folder get access. All the rest of us is denied. So far have I used a program called batchmod to fix it, but it takes time everyday to fix it.
In the workgroupmanager its like this :
8 users with UID from 1025 - 1032 belongs to three different groups.
1. "Alle" GID 1026 - user A,B,C,D,E,H
2. office GID 1027 - user A,B,C,D,E,F,H
3.Workgroup 1025 - A,B,C,D,E,F
The path for the folders on the server are : Server HD-Users-admin-my office-projects
The permission in the ServerAdmin to the folder : my office is:
ACL: "Alle" - allow-fullcontrol- this folder,child folders,child files,all descendants
POSIX: " Alle" - allow-read &write-this folder
On my workstation, in "the get info window" for the "my office" folder, the permission is :
If I go down one folder to the projects folder inside the "my office" folder
permission in the Server Adm program :
ACL
POSIX :
admin-allow-read&write-this folder
staff- allow-read&write-this folder
others-allow-read&write-this folder
On my workstation, in "the get info window" for the "projects" folder, the permission is :
-unknown - read and write
com.apple.local.ard-reports-read and write
everyone-read and write

Two things.
First, your server appears to be communicating with the client on both en0 & en1 (alternately).
Second, your server appears to be sending INFORM packets, but the clients aren't replying. That's a pattern frequently seen when the client reply is being grabbed by a rouge DHCP server.

Applications Folder Permissions Problem

I did a maverick clean install.
Everything seemed fine but now a few days later...
I am constantly told I have to authenticate
and this morning if I try and take anything out of app folder
I am told I don't have permission to do this.
suggestions?
can you be a little more specific.What are you doing when it asks to athenticate? For the Applications folder, that is normal, but... what are you moving and to where
For ten years, because I deal with a lot of apps
I have kept folders in my apps folder called:
- Archive (When an app is never getting used but it's not time yet to get rid of it...
the app goes in there.)
- A/V Apps
- Mind Map Apps
- 3rd Party Utilities
- Online Marketing Apps
- Social Networking Apps
However, since installing Mavericks...
If I try and drop an app in any of these folders...
I am not even asked to authenticate.
I am just told I don't have permission to perform this task.
When I get info on these folders...
- Apps Folder: admin R/W
- Archive: admin read only
- A/V Apps: admin read only
- Mind Map Apps: admin read only
- 3rd Party Utilities: admin R/W
- Online Marketing Apps: admin R/W
- Social Networking Apps: admin read only
1. I can't unlock the get info permissions window on any of these folders.
2. If I try to drag an item from one admin R/W folder to another admin R/W folder...
I am told I don't have permission to perform this task.
3. If I drag an item from any of these folders into the Apps folder, no problem.
At this moment, this problem seems isolated to the apps folder.
I can drag and drop without problem everywhere else.
Has the permissions structure of the Apps folder
radically changed with Mavericks?

Your ACLs have gone awry and need to repair your OS X installation. Use the Recovery Mode and reinstall OS X on top of your install and it should correct the errors.
I too have nested folders in my Applications folder and the structure migrated over from Snow Leopard to Mavericks intact. See picture below.
On a day to day basis I use my Mac as a standard user, which does not have permissions to modify the Apllications folder or its contents. However, when I install, move, trash or replace an App, Mavericks prompts me for an Admin user name and password.
When I 'move' an App from one Application nested folder to another, it 'Copies' it after authentication; hence I have to delete the original (once again after authenticating with an Admin name and password).
Now when I am logged into an Administrator account (which I rarely do), I can install, copy, move and delete Apps and folders at will without further authentication.
The above behaviour works as expected. Below is a pic of the permissions of my Applications folder. All enclosed items inherit the same permissions.

Back End Permission Problem

Hi everyone,
We encounter permission problems with our Visual Composer Applications.
We have created three applications using the visual composer and accessing a BI-system as backend
But the developer has super_user permissions and we dont want our endusers to have them.
Therefor we created new roles only with the permission to see that specific report.
But now, the users are not allwoed to see the data.
The error says, that I should ckeck the permissions.
Well, I did. The user can execute the queries I used directly with BEx - no problem, but within the VC-application not.
So I assume the problem are permissions in the portal.
If I give the user super_user permissions it works, but thats not what I want.
I want the user having minimal permissions in the portal.
Is there somebody who can help me?
Sincerely
Mark

Hi
Your problem looks like portal authorization issue. There is separate role for 'End Users' to execute & view the portal iview. Just check with your EP administrator, he will solve the problem. There will be role like -
*VC_Role.
*eu_Role.
Regards
Sandeep

Permission problems after upgrade to 10.5 on early Power PC G5 Tower

Permissions problems after upgrading to 10.5 on a client power PC (early) G5 tower.
Problems include folders that are created on XServe via this client do not allow any one else including this client to access. All other clients running 10.5, which happen to be newer Intel machines do not have this problem. Repairing permissions, updating to 10.5.1, try to manually correct permissions have all failed to repair the situation. All clients log onto the XServe with the same user/password. This client has since been downgraded back to 10.4.9 and has no issues.
The Xserve runs 10.3.9, any help would be greatly appreciated.
We have read through the forums regarding permission problems after upgrading and even tried some tips found here.

You really should check things out first before speaking.
Here are the requirements for 10.5;
Mac OS X v10.5 Leopard requires:
A Mac computer with an Intel, PowerPC G5, or Power PC G4 (867 MHz or faster) processor
512 MB memory or more
A DVD drive for installation
9 GB of available disk space or more
Some features require a compatible Internet service provider, fees may apply.
Some features require Apple's MobileMe service; fees apply.
Allan

Icacls Folder Permission Problem

Similar Messages

Maybe you are looking for