Solved Icacls Command lying to me in Windows 8.1

Pyprohly

Banned
Messages
7
(only recently I upgraded to Windows 8.1 from Windows 7, though I still will continue to help out at SevenForums, exclusively... for now...)

I needed to reproduce UNI's findings as per post #25 in this thread at SevenForums. It involves viewing and editing just a few permission settings, all of which I usually like to do via the Command Prompt using the Icacls command.

So whilst in the process of doing my thing, I noticed some output from Icacls that wasn't quite right -- namely, inherited permissions weren't showing. Rather, they were showing but Icacls reports them inherited permissions as explicit permissions, i.e. the "(I)" before "(F)" is missing which isn't right.

cmd1.gif

If I were to go and update the NewFileICreatedJustThen.txt permissions in any way, then change permissions back to what it was, Icacls would then report the file's ACL correctly.

E.g. I'll disable then immediately enable inheritance for the file through Explorer, then run Icacls on it again --

cmd2.gif
(Above is the correct output: each ACE should have "(I)(F)", not just "(F)")

PowerShell's Get-Acl cmdlet always reports the permissions correctly. Something's up with Icacls - or my Windows 8.1 install. I'm just wondering if it's only me that has this problem, or if there's actually a bug with Icacls.exe in Windows 8.1 -- a bug that I can't seem to find any discussion about on the web.


Could somebody, anyone, here, using Windows 8.1 -- 1) create a new file on their Desktop folder,
2) run Icacls on it,
3) then post the command's output here.

I'd like to know if Icacls' behaviour is like what I describe, across all Windows 8.1 installs.



Thanks in advance,

Pyprohly
 

My Computer

System One

  • OS
    Windows 8.1 Professional
Here is what I get:

Code:
 Directory of C:\Users\rrkurtz\Desktop

07/03/2015  12:07 PM                23 New Text Document.txt
               1 File(s)             23 bytes
               0 Dir(s)  154,617,896,960 bytes free

C:\Users\rrkurtz\Desktop>icacls "New Text Document.txt"
New Text Document.txt Everyone:(I)(F)
                      NT AUTHORITY\SYSTEM:(I)(F)
                      DESKTOP\rrkurtz:(I)(F)
                      BUILTIN\Administrators:(I)(F)

Successfully processed 1 files; Failed processing 0 files
 

My Computer

System One

  • OS
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Lenovo IdeaCenter K450
    CPU
    Intel Quad Core i7-4770 @ 3.4Ghz
    Motherboard
    Lenovo
    Memory
    16.0GB PC3-12800 DDR3 SDRAM 1600 MHz
    Graphics Card(s)
    Intel Integrated HD Graphics
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    HP h2207
    Screen Resolution
    1680x1050@59Hz
    Hard Drives
    250GB Samsung EVO SATA-3 SSD;
    2TB Seagate ST2000DM001 SATA-2;
    1.5TB Seagate ST3150041AS SATA
    PSU
    500W
    Keyboard
    Wired USB
    Mouse
    Wired USB
    Internet Speed
    3GB Up, 30GB Down
    Browser
    SeaMonkey
    Antivirus
    Windows Defender; MBAM Pro
    Other Info
    UEFI/GPT
    PLDS DVD-RW DH16AERSH
Thanks Ztruker!

I'm relieved to know that Icacls isn't broken on Windows 8.1.

Just to be sure though, Imma wait for one or two more samples from other Win8 users here, before I mark this thread solved.
 

My Computer

System One

  • OS
    Windows 8.1 Professional
Code:
Directory of C:\Users\Craig\Desktop

07/05/2015  08:16 AM    <DIR>          .
07/05/2015  08:16 AM    <DIR>          ..
07/05/2015  08:16 AM                 0 New Text Document.txt
               1 File(s)              0 bytes
               2 Dir(s)  769,388,892,160 bytes free

C:\Users\Craig\Desktop>icacls "New Text Document.txt"
New Text Document.txt NT AUTHORITY\SYSTEM:(F)
                      BUILTIN\Administrators:(F)
                      CRADOM-PC\Craig:(F)

Successfully processed 1 files; Failed processing 0 files
 

My Computer

System One

  • OS
    windows 8.1 64bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    HP Pavillion 500-223
    Memory
    8 gig
    Monitor(s) Displays
    SAmsung SyncMaster 2033
    Screen Resolution
    1600x900
    Mouse
    Logitech G500S
    Browser
    Firefox
I get this.

Code:
C:\Users\PAUL\Desktop>icacls test.txt
test.txt NT AUTHORITY\SYSTEM:(I)(F)
         BUILTIN\Administrators:(I)(F)
         ***********\PAUL:(I)(F)
         S-1-5-21-3962217083-4268653096-60228462-1000:(I)(F)
         S-1-5-21-707511655-4143145014-399622024-1001:(I)(F)
         S-1-5-21-796730167-3810524866-4010277847-1000:(I)(F)


Successfully processed 1 files; Failed processing 0 files
 
Last edited:

My Computer

System One

  • OS
    Windows 8.1 Pro x64 with Media Center, Windows 10 Pro x64, Windows 7 x64 Ultimate SP1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom System
    CPU
    INTEL Xeon E5-2670 LGA 2011
    Motherboard
    Gigabyte GA X79 UD5 v1.0 F13s
    Memory
    64GB (8 X 8 GB) G-Skill Ripjaws Z DDR3 2133 Quad Channel
    Graphics Card(s)
    EVGA GTX 1060 SC 3 GB
    Sound Card
    Realtek Onboard ALC898
    Monitor(s) Displays
    2 x Samsung S27E310
    Screen Resolution
    1920 x 1080
    Hard Drives
    Samsung 850 PRO 256 GB SSD
    1 x 6TB WD 6003FZBX SATA
    13 x 3TB WD 30EFRX SATA
    PSU
    Seasonic X-1050
    Case
    Thermaltake Armor+
    Cooling
    INTEL BXRTS2011LC Liquid-cooled
    Keyboard
    Logitech G510s
    Mouse
    Microsoft Wireless Explorer Mouse
    Internet Speed
    7.0 Mb/s
    Browser
    IE 11, Chrome
    Antivirus
    ESET NOD32 11.1, Malwarebytes Pro 3.5.1
    Other Info
    ASUS RT-AC68U router
Does the result change if you do this from a Elevated Command Prompt?
 

My Computer

System One

  • OS
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Lenovo IdeaCenter K450
    CPU
    Intel Quad Core i7-4770 @ 3.4Ghz
    Motherboard
    Lenovo
    Memory
    16.0GB PC3-12800 DDR3 SDRAM 1600 MHz
    Graphics Card(s)
    Intel Integrated HD Graphics
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    HP h2207
    Screen Resolution
    1680x1050@59Hz
    Hard Drives
    250GB Samsung EVO SATA-3 SSD;
    2TB Seagate ST2000DM001 SATA-2;
    1.5TB Seagate ST3150041AS SATA
    PSU
    500W
    Keyboard
    Wired USB
    Mouse
    Wired USB
    Internet Speed
    3GB Up, 30GB Down
    Browser
    SeaMonkey
    Antivirus
    Windows Defender; MBAM Pro
    Other Info
    UEFI/GPT
    PLDS DVD-RW DH16AERSH
Nope, same thing:

Code:
Directory of C:\Users\Craig\Desktop

07/05/2015  05:03 PM    <DIR>          .
07/05/2015  05:03 PM    <DIR>          ..
07/05/2015  05:03 PM                 0 New Text Document.txt
               1 File(s)              0 bytes
               2 Dir(s)  769,343,860,736 bytes free

C:\Users\Craig\Desktop>icacls "New Text Document.txt"
New Text Document.txt NT AUTHORITY\SYSTEM:(F)
                      BUILTIN\Administrators:(F)
                      CRADOM-PC\Craig:(F)

Successfully processed 1 files; Failed processing 0 files

C:\Users\Craig\Desktop>
 

My Computer

System One

  • OS
    windows 8.1 64bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    HP Pavillion 500-223
    Memory
    8 gig
    Monitor(s) Displays
    SAmsung SyncMaster 2033
    Screen Resolution
    1600x900
    Mouse
    Logitech G500S
    Browser
    Firefox
Thanks Pbcopter,

Like Ztruker's, your Icacls command is working correctly.


Thanks Cradom,

Hmm... you seem to suffer the same case of un-trustable Icacls to me. Cradom, could I get you do a few more things? Also, if you don't mind, I'd also like to know, approximately, how recent your Windows 8 install was.

Cradom, could you 1) Create a new file again,
2) Open a PowerShell window,
3) Using that PowerShell session, run a line similar to the below
Code:
$a = "C:\Path\to\FileIJustCreated.txt"; (get-acl $a).access; icacls $a
and post back your findings. Thanks.
 

My Computer

System One

  • OS
    Windows 8.1 Professional
Only thing I can answer til I get off work (1:00p) is it's an OEM install. Bought new last month. If there's an install date I don't know where to find it.
 

My Computer

System One

  • OS
    windows 8.1 64bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    HP Pavillion 500-223
    Memory
    8 gig
    Monitor(s) Displays
    SAmsung SyncMaster 2033
    Screen Resolution
    1600x900
    Mouse
    Logitech G500S
    Browser
    Firefox
Run systeminfo for a Elevated Command Prompt, look at Original Install Date. Mine is:

Original Install Date: 04/14/2014, 5:44:43 PM
 

My Computer

System One

  • OS
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Lenovo IdeaCenter K450
    CPU
    Intel Quad Core i7-4770 @ 3.4Ghz
    Motherboard
    Lenovo
    Memory
    16.0GB PC3-12800 DDR3 SDRAM 1600 MHz
    Graphics Card(s)
    Intel Integrated HD Graphics
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    HP h2207
    Screen Resolution
    1680x1050@59Hz
    Hard Drives
    250GB Samsung EVO SATA-3 SSD;
    2TB Seagate ST2000DM001 SATA-2;
    1.5TB Seagate ST3150041AS SATA
    PSU
    500W
    Keyboard
    Wired USB
    Mouse
    Wired USB
    Internet Speed
    3GB Up, 30GB Down
    Browser
    SeaMonkey
    Antivirus
    Windows Defender; MBAM Pro
    Other Info
    UEFI/GPT
    PLDS DVD-RW DH16AERSH
Original Install Date: 5/2/15

Why cant I select/copy in cmdline or powershell? Waste of time...

Windows PowerShell 2015-07-06 13.27.46.png
 

My Computer

System One

  • OS
    windows 8.1 64bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    HP Pavillion 500-223
    Memory
    8 gig
    Monitor(s) Displays
    SAmsung SyncMaster 2033
    Screen Resolution
    1600x900
    Mouse
    Logitech G500S
    Browser
    Firefox
How are you trying to copy?

right click on the upper boarder and select edit. Then select mark.

Left click and Use the mouse cursor to select the words you want to copy.

Then right click the upper boarder again, select edit, then copy.
 

My Computer

System One

  • OS
    Windows 8.1 Pro x64 with Media Center, Windows 10 Pro x64, Windows 7 x64 Ultimate SP1
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom System
    CPU
    INTEL Xeon E5-2670 LGA 2011
    Motherboard
    Gigabyte GA X79 UD5 v1.0 F13s
    Memory
    64GB (8 X 8 GB) G-Skill Ripjaws Z DDR3 2133 Quad Channel
    Graphics Card(s)
    EVGA GTX 1060 SC 3 GB
    Sound Card
    Realtek Onboard ALC898
    Monitor(s) Displays
    2 x Samsung S27E310
    Screen Resolution
    1920 x 1080
    Hard Drives
    Samsung 850 PRO 256 GB SSD
    1 x 6TB WD 6003FZBX SATA
    13 x 3TB WD 30EFRX SATA
    PSU
    Seasonic X-1050
    Case
    Thermaltake Armor+
    Cooling
    INTEL BXRTS2011LC Liquid-cooled
    Keyboard
    Logitech G510s
    Mouse
    Microsoft Wireless Explorer Mouse
    Internet Speed
    7.0 Mb/s
    Browser
    IE 11, Chrome
    Antivirus
    ESET NOD32 11.1, Malwarebytes Pro 3.5.1
    Other Info
    ASUS RT-AC68U router
I'm used to bash. That's too much work :)
 

My Computer

System One

  • OS
    windows 8.1 64bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    HP Pavillion 500-223
    Memory
    8 gig
    Monitor(s) Displays
    SAmsung SyncMaster 2033
    Screen Resolution
    1600x900
    Mouse
    Logitech G500S
    Browser
    Firefox
Install Windows 10 when it's released. The Command Prompt is a lot better. It includes normal mark,copy,cut,paste using the keyboard or mouse.
 

My Computer

System One

  • OS
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Lenovo IdeaCenter K450
    CPU
    Intel Quad Core i7-4770 @ 3.4Ghz
    Motherboard
    Lenovo
    Memory
    16.0GB PC3-12800 DDR3 SDRAM 1600 MHz
    Graphics Card(s)
    Intel Integrated HD Graphics
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    HP h2207
    Screen Resolution
    1680x1050@59Hz
    Hard Drives
    250GB Samsung EVO SATA-3 SSD;
    2TB Seagate ST2000DM001 SATA-2;
    1.5TB Seagate ST3150041AS SATA
    PSU
    500W
    Keyboard
    Wired USB
    Mouse
    Wired USB
    Internet Speed
    3GB Up, 30GB Down
    Browser
    SeaMonkey
    Antivirus
    Windows Defender; MBAM Pro
    Other Info
    UEFI/GPT
    PLDS DVD-RW DH16AERSH
[insert post 11 here]
Thanks Cradom, for the screenshot.

Why cant I select/copy in cmdline or powershell?
How are you trying to copy?

right click on the upper boarder and select edit. Then select mark.

Left click and Use the mouse cursor to select the words you want to copy.

Then right click the upper boarder again, select edit, then copy.
No need to go into the menu and explicitly select 'Mark'. PowerShell is practically always in Mark mode. Simply click and drag to select text at will. Then right-click to copy the marked text, and right-click to paste the text in the shell.

Install Windows 10 when it's released. The Command Prompt is a lot better. It includes normal mark,copy,cut,paste using the keyboard or mouse.
Can't wait for those new features. It's a small change but sure makes a difference.


Thank you, guys, for your time. I guess I will be using PowerShell instead of Icacls to view permissions for the time being.
 

My Computer

System One

  • OS
    Windows 8.1 Professional
Back
Top