问题描述
任何人都可以向我提供正确的语法来强制c:\ ProgramData \ MyApp(由管理员在安装过程中创建)以及所有子文件夹/文件可以由用户组完全访问吗?
Can anyone provide me with the proper syntax to force c:\ProgramData\MyApp (created by admin during an install) and all subfolders/files to be accessible in full by the user group?
即使admin组中的某人在此树中创建了文件，我也希望文件的安全设置允许用户组中的任何人都可以访问它.
Even if someone in the admin group creates a file in this tree, I want the file's security settings to allow anyone in the users group to access it.
我能猜到的最接近的值，应该是这样的:
The closest I've been able to guess, it should be something like this:
icacls"C:\ ProgramData \ MyApp" /T/C/授予(OI)(CI)用户:F
icacls "C:\ProgramData\MyApp" /T /C /Grant (OI) (CI) Users:F
，但是我无法弄清楚这种语法有什么问题.
but there's something wrong with this syntax that I can't figure out.
在此提供任何帮助.
推荐答案
您是否需要将其分为2个不同的请求(或者至少我必须这样做)?我首先设置权限，然后将其传递给我们.
do you ou need to Break it into 2 different request (or at least I had to) I first set the Permissions and then passed them on.
icacls"C:\ ProgramData \ MyApp" /T/C/授权用户:F
icacls "C:\ProgramData\MyApp" /T /C /Grant Users:F
icacls"C:\ ProgramData \ MyApp" /T/C/授权用户:(OI)
icacls "C:\ProgramData\MyApp" /T /C /Grant Users: (OI)
icacls"C:\ ProgramData \ MyApp" /T/C/授权用户:(CI)
icacls "C:\ProgramData\MyApp" /T /C /Grant Users: (CI)
这篇关于用户组的完整权限和继承的icacls.exe语法是什么-容器访问继承标志的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！