Set Access Control

This command lets you grant or deny permissions to certain types of system objects for groups of users and named user accounts.

Object Path

Enter the full path to the object for which you are setting permissions here.

• For a file system object, enter the full physical path to the file or folder.
• For a share object, enter the network name of the share.
• For a registry object, enter the full path of the registry key, preceded by one of the following [HKCR\ HKCU\ HKLM\ HKU\ HKCC\] depending on the root of the registry key.
• For a system service, enter the name of the service.
• For a printer object, enter the name of the printer.

User Accounts/Groups

Check the user accounts and groups you wish to set permissions for on the target object. To specify a named group or user, check the Named User Account/Group box, and enter the name in the field below. This option has effect only if Operation is set to Set Chosen Users with Access Rights.

Operation

Choose whether to completely deny, completely grant, or selectively grant access to the target object.

Access Rights

Check Read and/or Write to grant those types of access. This option has effect only if Operation is set to Set Chosen Users with Access Rights.

 Notes

• This command is non-recursive. For example, when access rights are being granted to a file system folder, this command does not set access rights for any files and subfolders already found within that folder - although new files and folders created within the folder will inherit the new access rights automatically.
  • For new file system folders you are creating, you may use the Create Folder command, immediately followed by the Apply Install command, to create an empty folder. Then use this command to grant your desired access rights before installing any actual content inside the new folder, to ensure any installed content automatically inherits your desired rights.
  • To recursively process the contents of an existing file system folder, use the For Each command on the collection of files and folders returned by the Find All Files command on your desired folder, executing this command on each member of the collection, after having removed the double quote " characters returned as part of long file paths by using the Replace String command.