what is the 's - synchronize' permission available in icacls.exe?

Discussion in 'Server Security' started by James, Dec 29, 2008.

  1. James

    James Guest

    using icacls.exe to automated setting some NTFS permissions... I'm wondering
    and the 'synchronize' option listed because If I set the permission I'm
    after in the windows gui and then run icacls.exe to view how icacls displays
    it, it includes the 's'... which I assume has no gui representation.

    eg. running this:

    icacls.exe d: /grant users:(CI)(IO)(WD)

    grants the 'write data / add file' permission to 'subfolders only' on my d:
    drive, as expected... and if I run icacls.exe d: to view what I just did it
    is displayed the same way. BUT, if I use the windows GUI to make this same
    change and then run icacls.exe to view that change it is displayed like
    this:

    (CI)(IO)(S,WD)

    which includes the 's', or 'synchronize'? So I'm thinking if the GUI does it
    then I should also when using icacls.exe? yes/no? what is it?
     
    James, Dec 29, 2008
    #1
    1. Advertisements

  2. James

    James Guest

    found it here:
    http://support.microsoft.com/kb/308419

    "Synchronize
    The Synchronize permission allows or denies different threads to wait on the
    handle for the file or folder and synchronize with another thread that may
    signal it. This permission applies only to multiple-threaded,
    multiple-process programs."

    and agian, when you set the special perms I mentioned in my post via the
    gui, this permission is also set, so I will do the same when using
    icacls.exe.
     
    James, Dec 30, 2008
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.