SetACL
SetACL is a freeware utility for manipulating security descriptors on Microsoft Windows. It used to be available under the GNU Lesser General Public License (LGPL) as a command-line utility and as an ActiveX component, but changed to a freeware license in version 3.0.0.0. Features This list of features is taken from the product's web page. Supports the following object types on Windows 2000 and later NTFS files and directories registry keys printers services network shares WMI objects Manage permissions on local or remote systems in domains or workgroups. Set multiple permissions for multiple users or groups in a single command. Control how permissions are inherited. List, backup and restore permissions. All operations work on a single object or recursively on a directory or registry tree. Set the owner to any user or group. Unicode support. Remove, replace or copy a user or group from an ACL. Fast performance due to time-consuming steps such as recursing a large file system are performed only once. Filter out object names not to be processed. Usage To set 'change' permissions on the directory 'C:\angela' for user 'brian' in domain 'dom1': Remove write and change permission sets from Desktop, replace with 'read and execute' permissions: