The command-line way:
Download Xcacls.exe from the
Windows 2000 Resource Kit. It works on XP; trust me.
Here are the usage instructions, straight from the output of
xcacls /?:
XCACLS filename [/T] [/E|/X] [/C] [/G user:perm;spec] [/R user [...]]
[/P user:perm;spec [...]] [/D user [...]] [/Y]
Description:
Displays or modifies access control lists (ACLs) of files.
Parameter List:
filename Displays ACLs.
/T Changes ACLs of specified files in
the current directory and all subdirectories.
/E Edits ACL instead of replacing it.
/X Same as /E except it only affects the ACEs that
the specified users already own.
/C Continues on access denied errors.
/G user:perm;spec Grants specified user access rights.
Perm can be:
R Read
C Change (write)
F Full control
P Change Permissions (Special access)
O Take Ownership (Special access)
X EXecute (Special access)
E REad (Special access)
W Write (Special access)
D Delete (Special access)
Spec can be the same as perm and will only be
applied to a directory. In this case, Perm
will be used for file inheritance in this
directory. By default, Spec=Perm.
Special values for Spec only:
T Valid for only for directories.
At least one access right has to
follow. Entries between ';' and T
will be ignored.
/R user Revokes specified user's access rights.
/P user:perm;spec Replaces specified user's access rights.
Access right specification as same as
/G option.
/D user Denies specified user access.
/Y Replaces user's rights without verify.
NOTE:
Wildcards can be used to specify more than one file.
More than one user can be specified.
Access rights can be combined.
Examples:
XCACLS /?
XCACLS TEMP.DOC /G ADMINISTRATOR:RC
XCACLS *.TXT /G ADMINISTRATOR:RC /Y
XCACLS *.* /R ADMINISTRATOR /Y
XCACLS TEST.DLL /D ADMINISTRATOR /Y
XCACLS TEST.DLL /P ADMINISTRATOR:F /Y
XCACLS *.* /G ADMINISTRATOR:F;TRW /Y
XCACLS *.* /G ADMINISTRATOR:F;TXE /C /Y
Basically, if you want to give user "Bob" full access to dummy.exe without being asked if you are sure, here is the command:
xcacls dummy.exe /G Bob:F /Y /C
If you want to deny Bob execute rights to dummy.exe, run
xcacls dummy.exe /D Bob:X /Y /C
Warning:
XCACLS is a powerful and extremely dangerous tool. Use it at your own
risk. This tool is not in any way supported by Microsoft.
--
Thanks and regards,
Arunvivek C
9789556112