ICACLS not working

I’ve got a series of machines that have the same folder/file that need permissions to be modified for the Everyone and Authenticated user group, they have FC/Modify and should have read/execute only, they currently have full control or modify. I’m testing using the following actionscript:

waithidden cmd.exe /C icacls.exe filepath /grant:r everyone:R

and it doesn’t do anything when I run it, the everyone group still has FC. Am I missing something?

Hi @dcr7779

Does this work in a normal dosbox?

I think the correct commando is:

waithidden cmd.exe /C icacls.exe filepath /grant everyone:R

(I use this in Bigfix, so even without the waithidden etc):

dos ICACLS "filepath" /grant "Authenticated Users":M

From my understanding if you omit the :r from /grant then it gives read, while keeping previous permissions. From technet for icacls:

Without :r, permissions are added to any previously granted explicit permissions.

ok, i missed that one.

Does your commando works in a dos box?

The command that you use doesn’t change anything either with me. As a workaround I delete the rights for everyone and add them again: