icontama.blogg.se

t Change the DACLs of files in the current directory and all subdirectories.

Table 1.1 Switches for the Cacls Tool Parameter Description The syntax for using this tool is: Cacls filenameĬacls also has a number of switches, which are parameters you can enter on the command line to use a specific functionality. A DACL is a listing of access control entries (ACEs) for users and groups, and includes permissions the user has to a file. Cacls provides this ability by allowing you to view and change DACLs on files. In the sections that follow, we will briefly discuss each of these tools, and show you how they can assist you in performing certain tasks when administering Active Directory.Ĭacls is used to view and modify the permissions a user or group has to a particular resource. ■ Whoami Provides information on the user who's currently logged on. ■ Ntdsutil Used for general management of Active Directory. ■ Ldifde Used to create, modify, and delete objects from Active Directory. ■ Dsmove Renames an object without moving it, or moves an object to a new location. ■ Dsmod Used to modify users, groups, computers, servers, contacts, and OUs.

■ Dsget Displays the properties of an object in Active Directory. ■ Dsadd Used to add users, groups, computers, contacts, and OUs. ■ Dcgpofix Restores Group Policy Objects (GPOs) to the state they where in when initially installed. ■ Csvde Used to import and export data from the directory. ■ Cmdkey Used to create, list, and delete usernames, passwords, and credentials. ■ Cacls Used to view and modify discretionary access control lists (DACLs) on files. The command-line tools for Active Directory include: These tools use commands typed in at the prompt, and can provide a number of services that are useful in administering the directory. Windows Server 2003 provides a number of command-line tools that you can use for managing Active Directory.