Re: how to undo incorrect CACLS command?


"james" <nospam@xxxxxxxxxx> wrote in message
news:e5zw6j$yJHA.2324@xxxxxxxxxxxxxxxxxxxxxxx
On a windowXP home PC, I first used cacls to view the C:\windows\temp
folder and got:

BUILTIN\Administrators:F
BUILTIN\Administrators:(OI)(CI)(IO)F
NT AUTHORITY\SYSTEM:F
NT AUTHORITY\SYSTEM:(IO)(CI)(IO)F
BUILTIN\Administrators:F
CREATOR OWNER:(IO)(CI)(IO)F
NT AUTHORITY\NETWORK SERVICE: (OI)(CI)(special access:)
DELETE
SYNCHRONIZE
FILE_READ_DATA

Then I screwed it up by entering the command "cacls temp /G userXXX:F"
without the /E parameter.

How do I restore C:\windows\temp to its original ACL? I have since
downloaded an util (SCESP4I.EXE) from microsoft that turns on the
security tab in xp home. What I'm having trouble is mapping the text ACL
output from cacls into gui based ACL. If someone could walk me thru the
re-creation of just the first 2 ACLs (administrators) that would be great.

Also, why is there a duplicate line BUILTIN\Administrators:F and do I need
to re-create that?

Try this - it's all you need for the %temp% directory:
cacls c:\Windows\temp /e /t /g everyone:F


.

Relevant Pages

  • Re: any backup utilities for ACLs?
    ... I can't seem to find a backup program that will actually ... Interestingly enough tar describes that it can restore ACL.. ... have the same permissions (as long as the user IDs are the same and the ...
    (freebsd-questions)
  • Re: ran caclc on "c:program files" no /e on XP Home
    ... Have you tried restoring back to a previous restore point? ... > directory on my WinXP Home system. ... Searching through Google groups, I ... > I am thinking I should have similar ACL on C:\Program Files but can't ...
    (microsoft.public.windowsxp.security_admin)