Cacls is now deprecated. If you are using Windows 7 or later, use icacls instead.
If you want to change the read/write, hidden, system settings of the file see the attrib command.
查看英文版
查看中文版
目錄
1 cacls 運行系統環境
2 Cacls Windows Vista和更高版本的語法
3 Windows XP和更早的語法
4 Cacls 示例
cacls 運行系統環境
Windows xp
Windows vista
Windows 2000
Windows 7
Windows 8
Windows 10
Windows NT
Cacls Windows Vista和更高版本的語法
顯示或修改文件的ACL（訪問控制列表）。
CACLS file name [/T] [/M] [/L] [/S[:SDDL]] [/E] [/C] [/G user:perm]
[/R user [...]] [/P user:perm [...]] [/D user [...]]
CI - 容器繼承。 ACE 會由目錄繼承。 OI - 對象繼承。 ACE 會由文件繼承。 IO - 只繼承。 ACE 不適用于當前文件/目錄。 ID - 已繼承。 ACE 從父目錄的 ACL 繼承。
Displays or modifies ACLs (access control lists) of files.
CACLS file name [/T] [/M] [/L] [/S[:SDDL]] [/E] [/C] [/G user:perm]
[/R user [...]] [/P user:perm [...]] [/D user [...]]
file name
The name of the file to query for ACL data.
/T
Changes ACLs of specified files in the current directory and all subdirectories.
/M
Changes ACLs of volumes mounted to a directory.
/L
Work on the symbolic link itself versus the target.
/S
Displays the SDDL string for the DACL.
/S:SDDL
Replaces the ACLs with those specified in the SDDL string (not valid with /E, /G, /R, /P, or /D).
/E
Edit ACL instead of replacing it.
/C
Continue on access denied errors.
/G user:perm
Grant access rights to user. Perm can be:
R
Read
W
Write
C
Change (write)
F
Full control
/R user
Revoke specified user's access rights (only valid with /E).
/P user:perm
Replace the access rights of user. Perm can be:
N
None
R
Read
W
Write
C
Change (write)
F
Full control
/D user
Deny specified user access.
Abbreviations:
CI - Container inherit. The ACE will be inherited by directories. OI - Object inherit. The ACE will be inherited by files. IO - Inherit only. The ACE does not apply to the current file or directory. ID - Inherited. The ACE was inherited from the parent directory's ACL.
CACLS 文件名 [/ T] [/ M] [/ L] [/ S [：SDDL]] [/ E] [/ C] [/ G 用戶：perm ]
[/ R用戶[...]] [/ P 用戶：燙發 [...] [/ D用戶[...]]
查看英文版
查看中文版
Windows XP和更早的語法
顯示或修改文件的ACL（訪問控制列表）。
CACLS file name [/T] [/E] [/C] [/G user:perm] [/R user [...]]
[/P user:perm [...]] [/D user [...]]
file name
查詢ACL數據的文件名。
/T
更改當前目錄和所有子目錄中指定文件的ACL。
/E
編輯ACL而不是替換它。
/C
繼續進行訪問被拒絕的錯誤。
/G user:perm
賦予指定用戶訪問權限：
W
讀取
C
更改 (寫入)
F
完全控制
/R user
撤銷指定用戶的訪問權限(僅在與 /E 一起使用時合法)。
/P user:perm
替換指定用戶的訪問權限 ：
R
讀取
W
寫入
C
更改(寫入)
F
完全控制
/D user
拒絕指定的用戶訪問。
通配符可以在命令中指定多個文件。 您可以在一個命令中指定多個用戶。
Displays or modifies ACLs (access control lists) of files.
CACLS file name [/T] [/E] [/C] [/G user:perm] [/R user [...]]
[/P user:perm [...]] [/D user [...]]
file name
The name of the file to query for ACL data.
/T
Changes ACLs of specified files in the current directory and all subdirectories.
/E
Edit ACL instead of replacing it.
/C
Continue on access denied errors.
/G user:perm
Grant access rights to user. Perm can be:
W
Write
C
Change (write)
F
Full control
/R user
Revoke specified user's access rights (only valid with /E).
/P user:perm
Replace the access rights of user. Perm can be:
R
Read
W
Write
C
Change (write)
F
Full control
/D user
Deny specified user access.
Wildcards can specify more than one file in a command. You can specify more than one user in a command.
The command above grants the user mrhope full rights (f) to the file myfile.txt. If the ACL for the file is then listed (for instance, using the first command above), the user mrhope appears in the list.
cacls (可以查看和修改文件的ACL)
使用cacls命令，用戶可以查看和修改文件的ACL。
The cacls command enables a user to view and modify an ACL of a file.
Cacls現在已棄用。如果您使用的是Windows 7或更高版本，請改用icacls。 如果要更改文件的讀/寫，隱藏的系統設置，請參閱attrib命令。
Cacls is now deprecated. If you are using Windows 7 or later, use icacls instead. If you want to change the read/write, hidden, system settings of the file see the attrib command.
查看英文版
查看中文版
1 cacls 運行系統環境
2 Cacls Windows Vista和更高版本的語法
3 Windows XP和更早的語法
4 Cacls 示例
cacls 運行系統環境
Windows xp
Windows vista
Windows 2000
Windows 7
Windows 8
Windows 10
Windows NT
Cacls Windows Vista和更高版本的語法
顯示或修改文件的ACL（訪問控制列表）。
CACLS file name [/T] [/M] [/L] [/S[:SDDL]] [/E] [/C] [/G user:perm] [/R user [...]] [/P user:perm [...]] [/D user [...]]賦予指定用戶訪問權限：
R 讀取
W 寫入
C 更改(寫入)
F 完全控制
替換指定用戶的訪問權限：
N 無
R 讀取
W Write C 更改（寫入）
F 完全控制
縮寫:
CI - 容器繼承。 ACE 會由目錄繼承。
OI - 對象繼承。 ACE 會由文件繼承。
IO - 只繼承。 ACE 不適用于當前文件/目錄。
ID - 已繼承。 ACE 從父目錄的 ACL 繼承。
Displays or modifies ACLs (access control lists) of files.
CACLS file name [/T] [/M] [/L] [/S[:SDDL]] [/E] [/C] [/G user:perm] [/R user [...]] [/P user:perm [...]] [/D user [...]]Grant access rights to user. Perm can be:
R Read W Write
C Change (write)
F Full control
Replace the access rights of user. Perm can be:
N None
R Read
W Write
C Change (write)
F Full control
Abbreviations:
CI - Container inherit. The ACE will be inherited by directories.
OI - Object inherit. The ACE will be inherited by files.
IO - Inherit only. The ACE does not apply to the current file or directory.
ID - Inherited. The ACE was inherited from the parent directory's ACL. CACLS 文件名 [/ T] [/ M] [/ L] [/ S [：SDDL]] [/ E] [/ C] [/ G 用戶：perm ] [/ R用戶[...]] [/ P 用戶：燙發 [...] [/ D用戶[...]]
查看英文版
查看中文版
Windows XP和更早的語法
顯示或修改文件的ACL（訪問控制列表）。
CACLS file name [/T] [/E] [/C] [/G user:perm] [/R user [...]] [/P user:perm [...]] [/D user [...]]賦予指定用戶訪問權限：
W 讀取
C 更改 (寫入)
F 完全控制
替換指定用戶的訪問權限 ：
R 讀取
W 寫入
C 更改(寫入)
F 完全控制
通配符可以在命令中指定多個文件。 您可以在一個命令中指定多個用戶。
Displays or modifies ACLs (access control lists) of files.
CACLS file name [/T] [/E] [/C] [/G user:perm] [/R user [...]] [/P user:perm [...]] [/D user [...]]Grant access rights to user. Perm can be:
W Write
C Change (write)
F Full control
Replace the access rights of user. Perm can be:
R Read W Write
C Change (write)
F Full control
Wildcards can specify more than one file in a command. You can specify more than one user in a command.
查看英文版
查看中文版
Cacls 示例
上面的命令顯示文件輸出示例：
READ_CONTROL FILE_READ_EA FILE_EXECUTE FILE_DELETE_CHILD BUILTINAdministrators:F Computer-NameNone:R NT AUTHORITYSYSTEM:(special access:) READ_CONTROL SYNCHRONIZE FILE_GENERIC_READ FILE_GENERIC_WRITE BUILTINAdministrators:(special access:) READ_CONTROL SYNCHRONIZE FILE_GENERIC_READ Everyone:R上面的命令為用戶mrhope授予文件myfile.txt的完全權限（f）。如果隨后列出了文件的ACL（例如，使用上面的第一個命令），則用戶mrhope出現在列表中。
The command above displays the ACLs for the file myfile.txt. Example
output:
READ_CONTROL FILE_READ_EA FILE_EXECUTE FILE_DELETE_CHILD BUILTINAdministrators:F Computer-NameNone:R NT AUTHORITYSYSTEM:(special access:) READ_CONTROL SYNCHRONIZE FILE_GENERIC_READ FILE_GENERIC_WRITE BUILTINAdministrators:(special access:) READ_CONTROL SYNCHRONIZE FILE_GENERIC_READ Everyone:RThe command above grants the user mrhope full rights (f) to the file myfile.txt. If the ACL for the file is then listed (for instance, using the first command above), the user mrhope appears in the list.
查看英文版
查看中文版
其他命令行
call | CD | chcp | chdir | ctty | copy | convert | chkdsk | control | compact | chkntfs | choice | comp | command/cmd | cls | cipher | clip | color |