showacls [/s] [/u:domain\user] [filespec]showacls [/s] [/u:domain\user] [filespec]
Where:
| ACE header values | |
|---|---|
| 0x1 | Object Inherit ACE |
| 0x2 | Container Inherit ACE |
| 0x4 | No Propagate Inherit ACE |
| 0x8 | Inherit Only ACE |
| Access mask values | |
|---|---|
| Delete. Allows or denies deleting the file or folder. If you don't have Delete permission on a file or folder, you can still delete it if you have been granted the Delete Subfolders and Files permission on the parent folder. | D |
| File Append. Append Data allows or denies making changes to the end of the file but not changing, deleting, or overwriting existing data (applies to files only). | a |
| File Execute. Execute File allows or denies running program files (applies to files only). | fx |
| File Read. File Read allows or denies viewing the attributes of a file or folder, such as read-only and hidden. Attributes are defined by NTFS. | r |
| File Write. Write Data allows or denies making changes to the file and overwriting existing content (applies to files only). | w |
| Generic All | A |
| Generic Execute. Execute File allows or denies running program files (applies to files only). | X |
| Generic Read. Allows or denies viewing the attributes of a file or folder, such as read-only and hidden. Attributes are defined by NTFS. | R |
| Generic Write. Allows or denies changing the attributes of a file or folder, such as read-only or hidden. Attributes are defined by NTFS. | W |
| List Directory. List Folder allows or denies viewing file names and subfolder names within the folder (applies to folders only). | l |
| Read Data. Read Data allows or denies viewing data in files (applies to files only). | d |
| Read EA. Allows or denies viewing the extended attributes of a file or folder. Extended attributes are defined by programs and may vary. | rE |
| Synchronize. Allows or denies different threads to wait on the handle for the file or folder and synchronize with another thread that may signal it. This permission applies only to multithreaded, multiprocess programs. | S |
| Write EA. Allows or denies changing the extended attributes of a file or folder. Extended attributes are defined by programs and may vary. | rW |