CACLS for windows XP

computerhope.com/cacls.htm
How Do I Get the Security tab in Folder Properties?
First, your hard drive must be formatted NTFS for this tab to show up.
Second, if you're running XP Pro, you must open Windows Explorer, go to Tools, Folder Options, View and uncheck Use Simple File Sharing.
Third, if you're running XP Home, Simple File Sharing is enforced by default and cannot be disabled.  You must boot the computer into Safe Mode and log in with the Administrator account, in order to see the Security tab.  A work around for XP Home, so that you don't have to enter Safe Mode, can be found here.
WARNING:  Adjusting the permissions on a drive, file or folder can lock even the Administrator account out of that drive/file/folder.  Deny Permissions take precedence over Allow Permissions, regardless of your group membership.  Administrators are members of the User's group, by default.  Uncheck Allow, rather than using Deny.  This page last updated 11/25/2005XCACLS windows 2000
CACLS: Capacidades de permisos de grupo
Siga estos pasos para cambiar las ACL de todos los archivos y directorios en la unidad C para permitir control total grupo local Administradores:

1. Abra un símbolo del sistema.
2. Tipo:
   cacls c:\ /t /e /g administradores: f
   /t of trash DACLs
   /e of edit DACLs
   /g of grant

Topics for CACLS (Modify Discretionary Access Control Lists)

• Where does CACLS come from?
• When would you need CACLS?
• How do the CACLS Switches work?
• What is the full list of CACLS switches?
• Setting CACLS for Multiple Users
• Killer use of CACLS
• Summary of CACLS

How do the CACLS Switches work? Here is a purely personal view of how to understand the CACLS syntax.  Begin by dividing the CACLS command into three parts thus: CACLS  1) folder name   2) replace, edit or revoke entries   3) grant user permission
Example: cacls  c:\home   /t     /g guyt:F
1) cacls c:\home - this is the path to the folder whose permissions you wish to change.
2) /t - replace (with guyt's permissions). Note, /t wipes out everyone else's permissions.  An alternative would be /e meaning edit or append permissions.
3) /g guyt:f - Think of /g as standing for Grant.  In this instance, the command grants guyt full control.  An alternative would be :r (read). Note the colon: incidentally, with cacls there isn't a comma in sight.

Source

Command-line reference A-Z

Displays or modifies discretionary access control list (DACL) files.
Syntax cacls FileName [/t] [/e] [/c] [/g User:permission] [/r User [...]] [/p User:permission [...]] [/d User [...]]

Parameters FileName   : Required. Displays DACLs of specified files.
/t   : Changes DACLs of specified files in the current directory and all subdirectories.
/e   : Edits a DACL instead of replacing it.
/c   : Continues to change DACLs, ignoring errors.
/g   User : permission   : Grants access rights to the specified user. The following table lists valid values for permission.

Value	Description
n	None
r	Read
w	Write
c	Change (Write)
f	Full Control

/r   User   : Revokes access rights for the specified user.
/p   User : permission   : Replaces access rights for the specified user. The following table lists valid values for permission.

Value	Description
n	None
r	Read
w	Write
c	Change (Write)
f	Full Control

/d   User   : Denies access for the specified user.
/?   : Displays help at the command prompt.
Remarks

• Use the following table to interpret the results.
  

  Output	ACE applies to
  OI	This folder and files
  CI	This folder and subfolders
  IO	The ACE does not apply to the current file/directory.
  No output message	This folder only
  (IO)(CI)	This folder, subfolders and files
  (OI)(CI)(IO)	Subfolders and files only
  (CI)(IO)	Subfolders only
  (OI)(IO)	Files only

• You can use wildcards (that is, ? and *) to specify multiple files.
  
• You can specify more than one user.
  

Formatting legend

Format	Meaning
Italic	Information that the user must supply
Bold	Elements that the user must type exactly as shown
Ellipsis (...)	Parameter that can be repeated several times in a command line
Between brackets ([])	Optional items
Between braces ({}); choices separated by pipe (|). Example: {even|odd}	Set of choices from which the user must choose only one
Courier font	Code or program output