Managing Printer, Service, WMI and Share Permissions with SetACL.exe

Managing Printer, Service, WMI and Share Permissions with SetACL.exe

Example 1 – Listing Printer Permissions^

SetACL.exe -on "\\server1\HP LaserJet 4050" -ot prn -actn list

Lists current permissions on printer ‘HP LaserJet 4050′ on server ‘server1′.

Example 2 – Setting Printer Permissions^

SetACL.exe -on "\\server1\HP LaserJet 4050" -ot prn -actn ace
           -ace "n:domain1\HelpDesk;p:man_docs"

Sets permissions to manage documents for group ‘HelpDesk’ from domain ‘domain1′ on printer ‘HP LaserJet 4050′ on server ‘server1′.

Example 3 – Services^

SetACL.exe -on "\\server1\W32Time" -ot srv -actn ace
           -ace "n:domain1\group1;p:start_stop"

Sets permissions to start and stop the Windows time service on server ‘server1′ for group ‘group1′ in domain ‘domain1′.

Example 4 – Listing Network Shares Permissions^

SetACL.exe -on "\\server1\Data$" -ot shr -actn list -lst f:tab

Lists current permissions on share ‘Data$’ on server ‘server1′ in table form.

Example 5 – Listing WMI Permissions^

SetACL.exe -on root -ot wmi -actn list -lst f:tab

Lists permissions on the WMI “root” in table form.