Display a user’s ACL access permissions for a file.
Output from PERMS can be incomplete in cases where a user has inherited permission through membership of a group.
Syntax
PERMS [account] [path] options
Key
account Username or [domain\|computer\]username
path Name of a file or folder in any legal format including UNC names.
Wildcards are permitted.
/i Interactively logged on to the computer where the path resides.
rather than being connected via the network.
/s Include subfolders
The output access mask uses the following abbreviations:
R Read file/folder.
W Write file/folder.
X Execute file.
D Delete file or folder. Can be inherited from the parent
via 'Delete Subfolder and Files' permission.
P Change Permission.
O Take Ownership.
A General All
- No Access
* The specified user is the owner of the file or folder.
# A group the user is a member of owns the file or folder.
? Permisssions cannot be determined.
"Microsoft allowed us to change our startup screen, but we don’t think we should have to ask permission every time we want to make some minor software modification. Windows is an operating system, not a religion” ~ Ted Waitt, Gateway Chairman
GPRESULT - Display Resultant Set of Policy information for a remote user and computer.
NTRIGHTS - Edit user account rights.
CACLS - Display or modify Access Control Lists (ACLs) for files and folders.
SUBINACL - Change an ACL’s user/domain (use when the file owner has moved to a new domain).
XCACLS - Display or modify Access Control Lists (ACLs) for files and folders.
Equivalent PowerShell: Set-Acl - Set permissions.
Equivalent bash command (Linux):chmod - Change access permissions.