Displays and changes permissions (access control entries) in the
Access
Control List (ACL) of objects in Active Directory.
DsAcls is the command-line equivalent of the Security tab
in the Properties dialog box for an Active Directory object
in Active Directory tools, such as Active Directory Users and
Computers. You can use either tool to view and change permissions
to an Active Directory object.
Note
The ACEs that you add by using DsAcls must be object-specific
permissions that override the default permissions defined in the
Active Directory schema for that object type. Do not add ACEs
unless you are well-informed about security for Active Directory
objects.
System Requirements
DsAcls runs on Windows 2000 and on Windows XP
Professional.
To view an ACL, the user must have permission to read
permissions on Active Directory objects. To change an ACL, the user
must have permission to write permissions to the Active Directory
object.
