Managing Printer, Service, WMI and Share Permissions with SetACL.exe

Example 1 – Listing Printer Permissions

SetACL.exe -on "\\server1\HP LaserJet 4050" -ot prn -actn list

Lists current permissions on printer ‘HP LaserJet 4050’ on server ‘server1’.

Example 2 – Setting Printer Permissions

SetACL.exe -on "\\server1\HP LaserJet 4050" -ot prn -actn ace
           -ace "n:domain1\HelpDesk;p:man_docs"

Sets permissions to manage documents for group ‘HelpDesk’ from domain ‘domain1’ on printer ‘HP LaserJet 4050’ on server ‘server1’.

Example 3 – Services

SetACL.exe -on "\\server1\W32Time" -ot srv -actn ace
           -ace "n:domain1\group1;p:start_stop"

Sets permissions to start and stop the Windows time service on server ‘server1’ for group ‘group1’ in domain ‘domain1’.

Example 4 – Listing Network Shares Permissions

SetACL.exe -on "\\server1\Data$" -ot shr -actn list -lst f:tab

Lists current permissions on share ‘Data$’ on server ‘server1’ in table form.

Example 5 – Listing WMI Permissions

SetACL.exe -on root -ot wmi -actn list -lst f:tab

Lists permissions on the WMI “root” in table form.