用户组的完整权限和继承的icacls.exe语法是什么-容器访问继承标志 [英] What's the icacls.exe syntax for full rights and inheritance for user group - Container Access Inheritance Flags

问题描述

任何人都可以向我提供正确的语法来强制c:\ ProgramData \ MyApp(由管理员在安装过程中创建)以及所有子文件夹/文件可以由用户组完全访问吗?

Can anyone provide me with the proper syntax to force c:\ProgramData\MyApp (created by admin during an install) and all subfolders/files to be accessible in full by the user group?

即使admin组中的某人在此树中创建了文件，我也希望文件的安全设置允许用户组中的任何人都可以访问它.

Even if someone in the admin group creates a file in this tree, I want the file's security settings to allow anyone in the users group to access it.

我能猜到的最接近的值，应该是这样的:

The closest I've been able to guess, it should be something like this:

icacls"C:\ ProgramData \ MyApp" /T/C/授予(OI)(CI)用户:F

icacls "C:\ProgramData\MyApp" /T /C  /Grant (OI) (CI) Users:F

，但是我无法弄清楚这种语法有什么问题.

but there's something wrong with this syntax that I can't figure out.

在此提供任何帮助.

推荐答案

您是否需要将其分为2个不同的请求(或者至少我必须这样做)?我首先设置权限，然后将其传递给我们.

do you ou need to Break it into 2 different request (or at least I had to) I first set the Permissions and then passed them on.

icacls"C:\ ProgramData \ MyApp" /T/C/授权用户:F

icacls "C:\ProgramData\MyApp" /T /C  /Grant Users:F

icacls"C:\ ProgramData \ MyApp" /T/C/授权用户:(OI)

icacls "C:\ProgramData\MyApp" /T /C  /Grant Users: (OI)

icacls"C:\ ProgramData \ MyApp" /T/C/授权用户:(CI)

icacls "C:\ProgramData\MyApp" /T /C  /Grant Users: (CI)

这篇关于用户组的完整权限和继承的icacls.exe语法是什么-容器访问继承标志的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！