Search code examples
file-permissionsicacls

Specifying permisions with icacls

I want to allocate read only permission to "Everyone" on an empty folder so that the users are not allowed to change the folder name. However I want "Everyone" to be able to create/modify/delete files in the folder.

say the folder is called /fred/myfolder

I've tried 

icacls /fred /grant Everyone:(OI)R

and

icacls /fred/myfolder /grant Everyone:(CI)R
icacls /fred/myfolder /grant Everyone:(OI)F

and various combinations to no avail. The documentation/my knowledge isn't great. Any help would be appreciated

Solution

  • I found the answer. I needed

    icacls /fred /grant Everyone:(OI)R

    Then i just needed

    icacls /fred/myfolder /grant Everyone:(OI)(CI)(OI)F

    These were the combinations that I found very useful:

    (NP) This Folder Only.
(OI) This folder and files.
(CI) This folder and subfolders.
(OI)(CI) This folder, subfolders, and files.
(OI)(CI)(IO) Subfolders and files only.
(CI)(IO) Subfolders only.
(OI)(IO) Files only.