| Autofmt.exe | 78.1 | Invalid drive specification.
The specified drive does not exist
or is non-removable. |
| ICacls.exe | 8.11011 | ICACLS name /save aclfile [/T] [/C] [/L] [/Q]
stores the DACLs for the files and folders that match the name
into aclfile for later use with /restore. Note that SACLs,
owner, or integrity labels are not saved.
ICACLS directory [/substitute SidOld SidNew [...]] /restore aclfile
[/C] [/L] [/Q]
applies the stored DACLs to files in directory.
ICACLS name /setowner user [/T] [/C] [/L] [/Q]
changes the owner of all matching names. This option does not
force a change of ownership; use the takeown.exe utility for
that purpose.
ICACLS name /findsid Sid [/T] [/C] [/L] [/Q]
finds all matching names that contain an ACL
explicitly mentioning Sid.
ICACLS name /verify [/T] [/C] [/L] [/Q]
finds all files whose ACL is not in canonical form or whose
lengths are inconsistent with ACE counts.
ICACLS name /reset [/T] [/C] [/L] [/Q]
replaces ACLs with default inherited ACLs for all matching files.
ICACLS name [/grant[:r] Sid:perm[...]]
[/deny Sid:perm [...]]
[/remove[:g|:d]] Sid[...]] [/T] [/C] [/L] [/Q]
[/setintegritylevel Level:policy[...]]
/grant[:r] Sid:perm grants the specified user access rights. With :r,
the permissions replace any previously granted explicit permissions.
Without :r, the permissions are added to any previously granted
explicit permissions.
/deny Sid:perm explicitly denies the specified user access rights.
An explicit deny ACE is added for the stated permissions and
the same permissions in any explicit grant are removed.
/remove[:[g|d]] Sid removes all occurrences of Sid in the ACL. With
:g, it removes all occurrences of granted rights to that Sid. With
:d, it removes all occurrences of denied rights to that Sid.
/setintegritylevel [(CI)(OI)]Level explicitly adds an integrity
ACE to all matching files. The level is to be specified as one
of:
L[ow]
M[edium]
H[igh]
Inheritance options for the integrity ACE may precede the level
and are applied only to directories.
/inheritance:e|d|r
e - enables inheritance
d - disables inheritance and copy the ACEs
r - remove all inherited ACEs
Note:
Sids may be in either numerical or friendly name form. If a numerical
form is given, affix a * to the start of the SID.
/T indicates that this operation is performed on all matching
files/directories below the directories specified in the name.
/C indicates that this operation will continue on all file errors.
Error messages will still be displayed.
/L indicates that this operation is performed on a symbolic link
itself versus its target.
/Q indicates that icacls should suppress success messages.
ICACLS preserves the canonical ordering of ACE entries:
Explicit denials
Explicit grants
Inherited denials
Inherited grants
perm is a permission mask and can be specified in one of two forms:
a sequence of simple rights:
N - no access
F - full access
M - modify access
RX - read and execute access
R - read-only access
W - write-only access
D - delete access
a comma-separated list in parentheses of specific rights:
DE - delete
RC - read control
WDAC - write DAC
WO - write owner
S - synchronize
AS - access system security
MA - maximum allowed
GR - generic read
GW - generic write
GE - generic execute
GA - generic all
RD - read data/list directory
WD - write data/add file
AD - append data/add subdirectory
REA - read extended attributes
WEA - write extended attributes
X - execute/traverse
DC - delete child
RA - read attributes
WA - write attributes
inheritance rights may precede either form and are applied
only to directories:
(OI) - object inherit
(CI) - container inherit
(IO) - inherit only
(NP) - don't propagate inherit
(I) - permission inherited from parent container
Examples:
icacls c:\windows\* /save AclFile /T
- Will save the ACLs for all files under c:\windows
and its subdirectories to AclFile.
icacls c:\windows\ /restore AclFile
- Will restore the Acls for every file within
AclFile that exists in c:\windows and its subdirectories.
icacls file /grant Administrator:(D,WDAC)
- Will grant the user Administrator Delete and Write DAC
permissions to file.
icacls file /grant *S-1-1-0:(D,WDAC)
- Will grant the user defined by sid S-1-1-0 Delete and
Write DAC permissions to file. |
| ICacls.exe | 7 | ICACLS name /save aclfile [/T] [/C] [/L] [/Q]
stores the DACLs for the files and folders that match the name
into aclfile for later use with /restore. Note that SACLs,
owner, or integrity labels are not saved.
ICACLS directory [/substitute SidOld SidNew [...]] /restore aclfile
[/C] [/L] [/Q]
applies the stored DACLs to files in directory.
ICACLS name /setowner user [/T] [/C] [/L] [/Q]
changes the owner of all matching names. This option does not
force a change of ownership; use the takeown.exe utility for
that purpose.
ICACLS name /findsid Sid [/T] [/C] [/L] [/Q]
finds all matching names that contain an ACL
explicitly mentioning Sid.
ICACLS name /verify [/T] [/C] [/L] [/Q]
finds all files whose ACL is not in canonical form or whose
lengths are inconsistent with ACE counts.
ICACLS name /reset [/T] [/C] [/L] [/Q]
replaces ACLs with default inherited ACLs for all matching files.
ICACLS name [/grant[:r] Sid:perm[...]]
[/deny Sid:perm [...]]
[/remove[:g|:d]] Sid[...]] [/T] [/C] [/L] [/Q]
[/setintegritylevel Level:policy[...]]
/grant[:r] Sid:perm grants the specified user access rights. With :r,
the permissions replace any previouly granted explicit permissions.
Without :r, the permissions are added to any previously granted
explicit permissions.
/deny Sid:perm explicitly denies the specified user access rights.
An explicit deny ACE is added for the stated permissions and
the same permissions in any explicit grant are removed.
/remove[:[g|d]] Sid removes all occurrences of Sid in the ACL. With
:g, it removes all occurrences of granted rights to that Sid. With
:d, it removes all occurrences of denied rights to that Sid.
/setintegritylevel [(CI)(OI)]Level explicitly adds an integrity
ACE to all matching files. The level is to be specified as one
of:
L[ow]
M[edium]
H[igh]
Inheritance options for the integrity ACE may precede the level
and are applied only to directories.
/inheritance:e|d|r
e - enables inheritance
d - disables inheritance and copy the ACEs
r - remove all inherited ACEs
Note:
Sids may be in either numerical or friendly name form. If a numerical
form is given, affix a * to the start of the SID.
/T indicates that this operation is performed on all matching
files/directories below the directories specified in the name.
/C indicates that this operation will continue on all file errors.
Error messages will still be displayed.
/L indicates that this operation is performed on a symbolic link
itself versus its target.
/Q indicates that icacls should supress success messages.
ICACLS preserves the canonical ordering of ACE entries:
Explicit denials
Explicit grants
Inherited denials
Inherited grants
perm is a permission mask and can be specified in one of two forms:
a sequence of simple rights:
N - no access
F - full access
M - modify access
RX - read and execute access
R - read-only access
W - write-only access
D - delete access
a comma-separated list in parentheses of specific rights:
DE - delete
RC - read control
WDAC - write DAC
WO - write owner
S - synchronize
AS - access system security
MA - maximum allowed
GR - generic read
GW - generic write
GE - generic execute
GA - generic all
RD - read data/list directory
WD - write data/add file
AD - append data/add subdirectory
REA - read extended attributes
WEA - write extended attributes
X - execute/traverse
DC - delete child
RA - read attributes
WA - write attributes
inheritance rights may precede either form and are applied
only to directories:
(OI) - object inherit
(CI) - container inherit
(IO) - inherit only
(NP) - don't propagate inherit
(I) - permission inherited from parent container
Examples:
icacls c:\windows\* /save AclFile /T
- Will save the ACLs for all files under c:\windows
and its subdirectories to AclFile.
icacls c:\windows\ /restore AclFile
- Will restore the Acls for every file within
AclFile that exists in c:\windows and its subdirectories.
icacls file /grant Administrator:(D,WDAC)
- Will grant the user Administrator Delete and Write DAC
permissions to file.
icacls file /grant *S-1-1-0:(D,WDAC)
- Will grant the user defined by sid S-1-1-0 Delete and
Write DAC permissions to file. |
| TransmogProvider.dll | 78.11011 | Upgrading system |
| arp.exe | 78.11011 | ARP: bad IP address: %2!S!. |
| at.exe | 78.11011 | Failed to convert input strings to unicode strings. |
| autochk.exe | 78.1 | Invalid drive specification.
The specified drive does not exist
or is non-removable. |
| autoconv.exe | 78.1 | Invalid drive specification.
The specified drive does not exist
or is non-removable. |
| bootmgfw.efi | 8.11011 | Preparing Automatic Repair |
| bootmgfw_EX.efi | 1011 | Preparing Automatic Repair |
| bootmgr.efi | 8.11011 | Preparing Automatic Repair |
| bootmgr.exe | 8.11011 | Preparing Automatic Repair |
| bootmgr_EX.efi | 1011 | Preparing Automatic Repair |
| combase.dll | 8.11011 | Unable to start a DCOM Server: %3 as %4/%5. The error:
"%2"
Happened while starting this command:
%1 |
| dhcpsapi.dll | 78.11011 | Renew, rebind or confirm received for IPv6 addresses %1 for which there are no active lease available |
| finger.exe | 78.11011 | Displays information about a user on a specified system running the
Finger service. Output varies based on the remote system.
FINGER [-l] [user]@host [...]
-l Displays information in long list format.
user Specifies the user you want information about. Omit the user
parameter to display information about all users on the
specifed host.
@host Specifies the server on the remote system whose users you
want information about. |
| ftp.exe | 78.11011 | ftp: ftp/tcp: unknown service. |
| hostname.exe | 78.11011 | sethostname |
| hwrcomp.exe | 78.1 | Failed to read input file or input file is empty |
| hwrreg.exe | 78.1 | Install the custom dictionary? (%1/%2) |
| imapi2fs.dll | 78.1 | Invalid drive specification.
The specified drive does not exist
or is non-removable. |
| ipconfig.exe | 78.11011 | Host Name . . . . . . . . . . . . : %1 |
| laps.dll | 1011 | The Local Administrator Password dll failed to initialize.
See https://go.microsoft.com/fwlink/?linkid=2220550 for more information. |
| mswsock.dll | 78.11011 | System not ready |
| nbtstat.exe | 1011 | Invalid option: %1!d! |
| netstat.exe | 78.11011 | %1: bad IP address: %2 |
| ole32.dll | 8.11011 | Unable to start a DCOM Server: %3 as %4/%5. The error:
"%2"
Happened while starting this command:
%1 |
| pathping.exe | 78.11011 | %1!4lu! ms |
| ping.exe | 78.11011 | Value must be supplied for option %1. |
| pnpibs.dll | 1011 | Windows Setup could not initialize its driver installation module. To install Windows, restart the installation. |
| rpcping.exe | 8.11011 | Usage:
rpcping [-t ] [-s ] [-e
|-f [,MajorVer]] [-O ] [-u ] [-a ]
[-N ] [-I ] [-C ]
[-T ] [-M ]
[-S ] [-P ] [-F ]
[-H ] [-o ]
[-B ] [-b] [-E] [-q] [-c]
[-A ] [-U ]
[-r ] [-v ] |
| rpcping.exe | 7 | Usage:
rpcping [-t ] [-s ] [-e
|-f [,MajorVer]] [-O ] [-u ] [-a ]
[-N ] [-I ] [-C ]
[-T ] [-M ]
[-S ] [-P ] [-F ]
[-H ] [-o ]
[-B ] [-b] [-E] [-q] [-c]
[-A ] [-U ]
[-r ] [-v ] [-d] |
| rstrtmgr.dll | 78.11011 | Ending session %1 started %2. |
| setupcl.dll | 1011 | |
| setupcl.exe | 1011 | |
| tftp.exe | 10 | %1: don't know host '%2' |
| tracert.exe | 78.11011 | %1!4lu! ms |
| ulib.dll | 78.1 | Invalid drive specification.
The specified drive does not exist
or is non-removable. |
| winsetup.dll | 1011 | Install Windows |
| winsrv.dll | 78.11011 | The following application attempted to veto the shutdown: %1. |
| wlansvc.dll | 78.11011 | WLAN Extensibility Module has successfully started.
Module Path: %1 |
| wsock32.dll | 78.11011 | System not ready |
| wudfplatform.dll | 1011 | The UMDF service %1 (CLSID %2) was installed. It requires framework version %3 or higher. |