Microsoft Knowledge Base Article 318754 contains the following summary:
This step-by-step article describes how to use the Extended Change Access Control List tool (Xcacls.exe)
to modify and view NTFS permissions for files or folders.
You can use Xcacls.exe to set all file-system security options that are accessible in Windows Explorer
from the command line. Xcacls.exe does this by displaying and modifying the access control lists (ACLs) of files.
Xcacls.exe is especially useful in unattended installations of Windows 2000 Professional or Windows 2000 Server.
By using this tool, you can set the initial access rights for folders in which the operating system resides.
When you distribute software to servers or workstations, Xcacls.exe also offers one-step protection against
deletion of folders or files by users.
The Xcacls.exe utility is included in the
Windows 2000 Resource Kit
.
You can download the Xcacls.exe utility from the following Microsoft Web site:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/xcacls-o.asp
