Icacls exe windows 10

Для управления NTFS разрешениями в Windows можно использовать встроенную утилиту iCACLS. Утилита командной строки icacls.exe позволяет получить или изменить списки управления доступом (ACL — Access Control Lists) на файлы и папки на файловой системе NTFS. В этой статье мы рассмотрим полезные команды управления ntfs разрешениями в Windows с помощью icacls.

Просмотр и изменения NTFS прав на папки и файлы с помощью icacls

Текущие права доступа к любому объекту на NTFS томе можно вывести так:

icacls 'C:\Share\Veteran\'

Картинка с сайта: winitpro.ru

Команда вернет список пользователей и групп, которым назначены права доступа. Права указываются с помощью сокращений:

• F – полный доступ
• M – изменение
• RX – чтение и выполнение
• R – только чтение
• W – запись
• D – удаление

Перед правами доступа указаны права наследования (применяются только к каталогам):

• (OI)— наследование объектами
• (CI)— наследование контейнерами
• (IO)— только наследование
• (I)– разрешение унаследовано от родительского объекта

С помощью icacls вы можете изменить права доступа на папку.

Чтобы предоставить группе fs01_Auditors домена resource права чтения и выполнения (RX) на каталог, выполните:

icacls 'C:\Share\Veteran\' /grant resource\fs01_Auditors:RX

Картинка с сайта: winitpro.ru

Чтобы удалить группу из ACL каталога:

icacls 'C:\Share\Veteran\' /remove resource\fs01_Auditors

С помощью icacls вы можете включить наследование NTFS прав с родительского каталога:

icacls 'C:\Share\Veteran\' /inheritance:e

Картинка с сайта: winitpro.ru

Или отключить наследование с удалением всех наследованных ACEs:

icacls 'C:\Share\Veteran\' /inheritance:r

Также icacls можно использовать, чтобы изменить владельца файла или каталога:

icacls 'C:\Share\Veteran\' /setowner resource\a.ivanov /T /C /L /Q

Картинка с сайта: winitpro.ru

Бэкап (экспорт) текущих NTFS разрешений каталога

Перед существенным изменением разрешений (переносе, обновлении ACL, миграции ресурсов) на NTFS папке (общей сетевой папке) желательно создать резервную копию старых разрешений. Данная копия позволит вам вернуться к исходным настройкам или хотя бы уточнить старые права доступа на конкретный файл/каталог.

Для экспорта/импорта текущих NTFS разрешений каталога вы также можете использовать утилиту icacls. Чтобы получить все ACL для конкретной папки (в том числе вложенных каталогов и файлов), и экспортировать их в текстовый файл, нужно выполнить команду

icacls 'C:\Share\Veteran' /save c:\ps\veteran_ntfs_perms.txt /t /c

Примечание. Ключ /t указывает, что нужно получить ACL для всех дочерних подкаталогов и файлов, ключ /c – позволяет игнорировать ошибки доступа. Добавив ключ /q можно отключить вывод на экран информации об успешных действиях при доступе к объектам файловой системы.

Картинка с сайта: winitpro.ru

В зависимости от количества файлов и папок, процесс экспорта разрешений может занять довольно продолжительное время. После окончания выполнения команды отобразится статистика о количестве обработанных и пропущенных файлов.

Successfully processed 3001 files; Failed processing 0 files

Картинка с сайта: winitpro.ru

Откройте файл veteran_ntfs_perms.txt с помощью любого текстового редактора. Как вы видите, он содержит полный список папок и файлов в каталоге, и для каждого указаны текущие разрешения в формате SDDL (Security Descriptor Definition Language).

Картинка с сайта: winitpro.ru

К примеру, текущие NTFS разрешения на корень папки такие:

D:PAI(A;OICI;FA;;;BA)(A;OICIIO;FA;;;CO)(A;OICI;0x1200a9;;;S-1-5-21-2340243621-32346796122-2349433313-23777994)(A;OICI;0x1301bf;;;S-1-5-21-2340243621-32346796122-2349433313-23777993)(A;OICI;FA;;;SY)(A;OICI;FA;;;S-1-5-21-2340243621-32346796122-2349433313-24109193)S:AI

Данная строка описывает доступ для нескольких групп или пользователей. Мы не будем подробно углубляться в SDDL синтаксис (при желании справку по нему можно найти на MSDN, или вкратце формат рассматривался в статье об управлении правами на службы Windows). Мы для примера разберем небольшой кусок SDDL, выбрав только одного субъекта:

(A;OICI;FA;;;S-1-5-21-2340243621-32346796122-2349433313-24109193)

A – тип доступа (Allow)

OICI – флаг наследования (OBJECT INHERIT+ CONTAINER INHERIT)

FA – тип разрешения (SDDL_FILE_ALL – все разрешено)

S-1-5-21-2340243621-32346796122-2349433313-24109193 – SID учетной записи или группы в домене, для которой заданы разрешения. Чтобы преобразовать SID в имя учетной записи или группы, воспользуйтесь командой:

$objSID = New-Object System.Security.Principal.SecurityIdentifier ("S-1-5-21-2340243621-32346796122-2349433313-24109193")
$objUser = $objSID.Translate( [System.Security.Principal.NTAccount])


$objUser.Value

Картинка с сайта: winitpro.ru

Или командами:

Get-ADUser -Identity SID

или

Get-ADGroup -Identity SID

Таким образом, мы узнали, что пользователь corp\dvivan обладал полными правами (Full Control) на данный каталог.

Восстановление NTFS разрешений с помощью iCacls

С помощью ранее созданного файла veteran_ntfs_perms.txt вы можете восстановить NTFS разрешения на каталог. Чтобы задать NTFS права на объекты в каталоге в соответствии со значениями в файле с резервной копией ACL, выполните команду:

icacls C:\share /restore c:\PS\veteran_ntfs_perms.txt /t /c

Примечание. Обратите внимание, что при импорте разрешений из файла указывается путь к родительской папке, но не имя самого каталога.

По окончанию восстановления разрешений также отобразится статистика о количестве обработанных файлов:

Successfully processed 114 files; Failed processing 0 files

Картинка с сайта: winitpro.ru

С учетом того, что в резервной копии ACL указываются относительные, а не абсолютные пути к файлам, вы можете восстановить разрешения в каталоге даже после его перемещения на другой диск/каталог.

Сброс NTFS разрешений в Windows

С помощью утилиты icacls вы можете сбросить текущие разрешения на указанный файл или каталог (и любые вложенные объекты):

icacls C:\share\veteran /reset /T /Q /C /RESET

Данная команда включит для указанного объекта наследование NTFS разрешений с родительского каталога, и удалит любые другие права.

Картинка с сайта: winitpro.ru

Копирование NTFS прав между папками

Вы можете использовать текстовый файл с резервной копией ACL для копирования NTFS разрешений с одного каталога на другой/

Сначала создайте бэкап NTFS разрешений корня папки:

icacls 'C:\Share\Veteran' /save c:\ps\save_ntfs_perms.txt /c

А замет примените сохраненные ACL к целевой папке:

icacls e:\share /restore c:\ps\save_ntfs_perms.txt /c

Это сработает, если исходная и целевая папка называются одинаково. А что делать, если имя целевой папки отличается? Например, вам нужно скопировать NTFS разрешения на каталог E:\PublicDOCS

Проще всего открыть файл save_ntfs_perms.txt в блокноте и отредактировать имя каталога. С помощью функции Replace замените имя каталога Veteran на PublicDOCS.

Картинка с сайта: winitpro.ru

Затем импортируйте NTFS разрешения из файла и примените их к целевому каталогу:

icacls e:\ /restore c:\ps\save_ntfs_perms.txt /c

Одной из типовых задач администратора Windows при настройке доступа пользователей – управление NTFS разрешениями на папки и файлы файловой системы. Для управления NTFS разрешениями можно использовать графический интерфейс системы (вкладка Безопасность/Security в свойствах папки или файла), или встроенную утилиту командной строки iCACLS. В этой статье мы рассмотрим примеру использовании команды iCACLS для просмотра и управления разрешениями на папки и файлы.

Утилита iCACLS позволяет отображать или изменять списки управления доступом (Access Control Lists (ACLs) к файлам и папкам файловой системы. Предшественником у утилиты iCACLS.EXE является команда CACLS.EXE (доступна в Windows XP).

Чтобы просмотреть действующие разрешения на конкретную папку (например, C:\PS), откройте командную строку и выполните команду:

icacls c:\PS

Данная команда вернет список всех пользователей и групп пользователей, которым назначены разрешения на данную папку. Попробуем разобраться в синтаксисе разрешений, которые вернула команда iCACLS.

c:\PS BUILTIN\Администраторы:(I)(OI)(CI)(F)
NT AUTHORITY\СИСТЕМА:(I)(OI)(CI)(F)
BUILTIN\Пользователи:(I)(OI)(CI)(RX)
NT AUTHORITY\Прошедшие проверку:(I)(M)
NT AUTHORITY\Прошедшие проверку:(I)(OI)(CI)(IO)(M)

Успешно обработано 1 файлов; не удалось обработать 0 файлов

Картинка с сайта: vmblog.ru

Напротив каждой группы и пользователя указан уровень доступа. Права доступа указываются с помощью сокращений. Рассмотрим разрешения для группы BUILTIN\Администраторы.

(OI) -  Object inherit – права наследуются на нижестоящие объекты
(CI) - Container inherit – наследование каталога
(F) – Full control– полный доступ к папке
(I) — Inherit   права наследованы с вышестоящего каталога

Это означает, что у данной группы есть права на запись, изменение данных в данном каталоге и на изменения NTFS разрешений. Данные права наследуются на все дочерние объекты в этом каталоге.

Ниже представлен полный список разрешений, которые можно устанавливать с помощью утилиты icacls.

Права наследования:

(OI) — object inherit
(CI) — container inherit
(IO) — inherit only
(NP) — don’t propagate inherit
(I) — Permission inherited from parent container

Список основных прав доступа:

D — право удаления
F — полный доступ
N — нет доступа
M — доступ на изменение
RX — доступ на чтение и запуск
R — доступ только на чтение
W — доступ только на запись

Детальные разрешения:

DE — Delete
RC — read control
WDAC — write DAC
WO — write owner
S — synchronize
AS — access system security
MA — maximum allowed
GR — generic read
GW — generic write
GE — generic execute
GA — generic all
RD — read data/list directory
WD — write data/add file
AD — append data/add subdirectory
REA — read extended attributes
WEA — write extended attributes
X — execute/traverse
DC — delete child
RA — read attributes
WA — write attributes

С помощью утилиты icacls вы можете сохранить текущие списки доступа к объекту в файл, а затем применить сохраненный список к этому же или другим объектам (своеобразный способ создания резервной копии текущего списка доступа — ACL).

Чтобы выгрузить текущие ACL папки C:\PS и сохранить их в текстовый файл export_ps_acl.txt, выполните команду:

icacls C:\PS\* /save c:\backup\export_ps_acl.txt /t

Данная команда сохраняет ACLs не только на сам каталог, но и на все вложенные папки и файлы. Полученный текстовый файл можно открыть с помощью блокнота или любого текстового редактора.

Картинка с сайта: vmblog.ru

Чтобы применить сохраненные списки доступа (восстановить разрешения на каталог и все вложенные объекты), выполните команду:

icacls C:\PS /restore :\backup\export_ps_acl.txt

Таким образом процесс переноса прав доступа с одной папки на другую становится намного легче.

С помощью команды icacls вы можете изменить списки доступа к папке. Например, вы хотите предоставить пользователю aivanov право на редактирование содержимого папки. Выполните команду:

icacls C:\PS /grant aivanov:M

Удалить все назначенные разрешения для учетной записи пользователя aivanov можно с помощью команды:

icacls C:\PS /remove aivanov

Вы можете запретить пользователю или группе пользователей доступ к файлу или папке так:

icacls c:\ps /deny "MSKManagers:(CI)(M)"

Имейте в виду, что запрещающие правил имеют больший приоритете, чем разрешающие.

С помощью команды icacls вы можете изменить владельца каталог или папки, например:

icacls c:\ps\secret.docx /setowner aivanov /T /C /L /Q

Теперь разберемся, что это за параметры используются в каждой команде.

• /Q – сообщение об успешном выполнении команды не выводится;
• /L – команда выполняется непосредственно над символической ссылкой, а не конкретным объектом;
• /C – выполнение команды будет продолжаться несмотря на файловые ошибки; при этом сообщения об ошибках все равно будут отображаться;
• /T – команда используется для всех файлов и каталогов, которые расположены в указанном каталоге;

Вы можете изменить владельца всех файлов в каталоге:

icacls c:\ps\* /setowner aivanov /T /C /L /Q

Также при помощи icacls можно сбросить текущие разрешения на объекты,

icacls C:\ps /T /Q /C /RESET

Картинка с сайта: vmblog.ru

После выполнения команды все текущие разрешения на папку будут сброшены и заменены на разрешения, наследуемые с вышестоящего объекта (каталога).

The genuine icacls.exe file is a software component of Microsoft Windows Operating System by .
«Icacls.exe» is the Microsoft «Integrity Control of Access Control List Settings» process. It can be executed from the command prompt or in scripts. Microsoft created it for Windows Server 2003 and Vista to improve on limitations of earlier commands, to display, modify, backup and restore Access Control Lists (ACLs) for files and folders in NTFS file systems, including the ability to save ACL’s in a file and restore them. It is meant for system administrator use, primarily in servers and requires familiarity with SIDs (Security Identifiers) and Access Control Entries (ACE) and Access Control Lists (ACL).

ICACLS stands for Integrity Control of Access Control List Settings

The .exe extension on a filename indicates an executable file. Executable files may, in some cases, harm your computer. Therefore, please read below to decide for yourself whether the icacls.exe on your computer is a Trojan that you should remove, or whether it is a file belonging to the Windows operating system or to a trusted application.

Click to Run a Free Scan for icacls.exe related errors

Icacls.exe file information

Картинка с сайта: www.file.net

The process known as icacls belongs to software Microsoft Windows Operating System or Red AdBlocker by Microsoft (www.microsoft.com).

Description: Icacls.exe is not essential for the Windows OS and causes relatively few problems. The icacls.exe file is located in a subfolder of the user’s profile folder (mostly C:\Users\USERNAME\AppData\Roaming\Microsoft\Windows\IEUpdate\).
Known file sizes on Windows 10/11/7 are 134,656 bytes (66% of all occurrences) or 132,096 bytes.  

The application has no file description. The program has no visible window. Icacls.exe is not a Windows core file. The program starts upon Windows startup (see Registry key: User Shell Folders, Run, RunOnce).

Icacls.exe is able to monitor applications.
Therefore the technical security rating is 71% dangerous, but you should also take into account the user reviews.

Uninstalling this variant:
It is possible to uninstall the associated program (Start > Control Panel > Uninstall a Program > Red AdBlocker).

Recommended: Identify icacls.exe related errors

• If icacls.exe is located in the C:\Windows\System32 folder, the security rating is 8% dangerous. The file size is 29,696 bytes (66% of all occurrences) or 30,208 bytes.
  It is a Windows system file. The icacls.exe file is a Microsoft signed file. There is no description of the program. The program has no visible window.
• If icacls.exe is located in a subfolder of C:\Windows, the security rating is 8% dangerous. The file size is 29,696 bytes (66% of all occurrences) or 30,208 bytes.
  The icacls.exe file is a Windows system file. There is no description of the program. It is a trustworthy file from Microsoft. The program has no visible window.
• If icacls.exe is located in a subfolder of «C:\Program Files», the security rating is 84% dangerous. The file size is 56,320 bytes.
  

Important: Some malware also uses the file name icacls.exe, for example TROJ_GEN.R02KC0CHQ14 or TROJ_SPNR.22JL14 (detected by TrendMicro), and Trojan Horse or Trojan.Gen (detected by Symantec). Therefore, you should check the icacls.exe process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer’s security. This was one of the Top Download Picks of The Washington Post and PC World.

Best practices for resolving icacls issues

A clean and tidy computer is the key requirement for avoiding problems with icacls. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows’ 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the icacls.exe process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. BMalwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

openvpnserv2.exe dce.exe hmpalert.sys icacls.exe nvvsnc.vbs wintool.exe nsmservice.exe uninstallclean.bat snare.dll csraudioguictrl.exe avastnm.exe [all]

icacls.exe is a useful command line tool that can be used to change the NTFS file system permission in older versions of Operating systems like Windows Server 2003, 2007, and Windows 7. The interesting part about icacls.exe is that it is also available in Windows 10 and 11.

You might be familiar with Windows Server 2003 as Microsoft’s serving operating system. As an update from Windows Server 2000, it packed in more stability, and it comes with an in-box command-line utility called Integrity Control Access Control List (ICACL).  And this is where the icacls.exe comes into the picture.

icacls.exe is a command-line utility file available on Windows Server 2003, and also in Windows 11. It was released to replace the cacls command. The full form of iCACLS is Integrity Control Access Control List. Its primary function is to show or change discretionary access control lists (also known as DACLs) for specific file. Files in some directories also use the stored DACLs.

iCACLS File Location and Size

icacls.exe can be found in multiple locations in Windows 10 and 11 like under C:\Windows\System32; C:\Windows\SysWOW64; C:\Windows\WinSxS\ etc.  Here is quick overview of this executable file:

• File Location: C:\Windows\System32
• File Size: 39kB (depending on your version and Windows build)
• Product Name: File version: 10.0.19041.1

Картинка с сайта: winosbite.com

The file includes a verified signature by Microsoft, but it does not have a visible window. Windows loads the file while booting. The security threats around the file are minimal, but you can easily verify whether it’s a maliciousness.

Icacls Syntax:

• For files to display DACLs:

icacls<filename> [/grant[:r] <sid>:<perm>[...]] [/deny <sid>:<perm>[...]] [/remove[:g|:d]] <sid>[...]] [/t] [/c] [/l] [/q] [/setintegritylevel<Level>:<policy>[...]]

• For directory to display DACLs:

icacls<directory> [/substitute <sidold><sidnew> [...]] [/restore <aclfile> [/c] [/l] [/q]]

The SID can also be alphanumeric. For numerical forms, all you have to do is to put a * as wildcard character to the beginning of SID.

Operations:

[/save <ACLfile> [/t] [/c] [/l] [/q]] – This function stores DACLs to an ACL file for matching files

/restore <ACLfile> [/c] [/l] [/q] – This applies the stored DACLs to the specified directory from the ACL file.

[/setowner<username> [/t] [/c] [/l] [/q]] – alters the matching file’s owner to the new one

[/findsid<sid> [/t] [/c] [/l] [/q]] – looks up files with a DACL matching the specified SID

[/verify [/t] [/c] [/l] [/q]] – This command basically checks for non-canonical ACLs or with inconsistent lengths with ACE (Access Control Entry) counts.

[/reset [/t] [/c] [/l] [/q]] – Substitutes ACLs for matching files with default ACLs

[/grant[:r] <sid>:[…]] – Changes access rights for specified user.

Parameter Breakdown:

• /t – for files in the current directory and its subdirectories.
• /c – ignores file errors during operation (errors messages are still shown).
• /l – for symbolic links (instead of destination)
• /q – suppress the success messages

How to identify icacls.exe as a virus?

Often malware programmers mask services and system files as malware to deceive security programs and scans. Ensure the EXE file is at the mentioned path and the size does not vary significantly.

You can verify the process’s running status from Task Manager. Ensure that it is not consuming too much memory or CPU power.

Resolving issues regarding icacls.exe

We recommend keeping up-to-date Windows for security reasons and hardware driver updates. Install a well-reviewed third-party antivirus program or malware remover to detect and repair any threats automatically.

You can also run system scans using the following commands in the command prompt window:

• cleanmgr
• sfc/scannow

Maintain your computer by removing files and programs you no longer require. You can also enable Windows and check the autostart programs using MSConfig.

As a good practice, create Restore Points to preserve the state of your system before making changes. In case a runtime error occurs, you can revert or reset to a previous point.

Here are the commands you may use to restore your PC:

• resmon command
• DISM.exe/Online/Cleanup-image/Restorehealth

Both options allow you to identify faulty processes and restore the Operating System without losing data. However, it is best to backup your files before committing to any changes.

As alternatives, you may resort to anti-malware software and third-party antivirus programs to detect hidden processes and potential spyware or Trojans, which the system scans can overlook. Here is how to enable or disable Windows Defender in case if you are using any 3rd party antivirus program. Find yourself a decent package that can detect and remove sleeping malware and viruses from your hard drive.

Definition of icacls.exe

icacls.exe is a kind of EXE error that is found in the Microsoft Windows operating systems. The latest version of the error is 1.0.0.0 and the file can be found in Windows 7 Home Premium. icacls.exe has a popularity rating of 1 / 10.

What Is The icacls.exe Error?

When there is a misfire within your system and the icacls.exe file cannot be loaded, Windows will inform you with the error message. Below are a number of possible different error messages:

What Causes EXE errors?

EXE errors like icacls.exe can be caused by a number of factors. These can include not properly installing or uninstalling a specific software application such as Windows 7 Home Premium. Certain files can be missing or corrupt such as corrupted registry keys. In some cases, when viruses infiltrate your system, they can alter your computer settings and cause errors like icacls.exe. In addition, out of date drivers are known to cause several EXE errors including icacls.exe.

How to Fix icacls.exe Errors

Follow the step by step instructions below to fix the icacls.exe problem. We recommend you do each in order. If you wish to skip these steps because they are too time consuming or you are not a computer expert, see our easier solution below.

Step 1 — Uninstall and Reinstall Windows 7 Home Premium

If the icacls.exe is a result of using Windows 7 Home Premium, you may want to try reinstalling it and see if the problem is fixed. Please follow these steps:

Step 2 — Remove Registry Entry related to icacls.exe

WARNING: Do NOT edit the Windows Registry unless you absolutely know what you are doing. You may end up causing more trouble than you start with. Proceed at your OWN RISK.

1. Create a backup of registry files.
2. Click “Start”.
3. Type regedit, select it, and grant permission in order to proceed.
4. Click HKEY LOCAL MACHINE>>SOFTWARE>>Microsoft>>Windows>>Current Version>>Uninstall.
5. Find the icacls.exe software from the list you wish to uninstall.
6. Select the software and double click the UninstallString icon on the right side.
7. Copy the highlighted text.
8. Exit and go to the search field.
9. Paste the data.
10. Select Okay in order to uninstall the program.
11. Reinstall the software.

Step 3 – Ensure Junk Isn’t Causing icacls.exe

Any space that isn’t regularly cleaned out tends to accumulate junk. Your personal computer is no exception. Constant web browsing, installation of applications, and even browser thumbnail caches slow down your device and in the absence of adequate memory, can also trigger a icacls.exe error.

So how do you get around this problem?

• You can either use the Disk Cleanup Tool that comes baked into your Windows operating system.
• Or you can use a more specialized hard drive clean up solution that does a thorough job and flushes the most stubborn temporary files from your system.

Both solutions may take several minutes to complete the processing of your system data if you haven’t conducted a clean up in a while.

The browser caches are almost a lost cause because they tend to fill up quite rapidly, thanks to our constantly connected and on the go lifestyle.

Here’s how you can run the Window’s Disk Cleanup Tool, without performance issues or surprises.

• For Windows XP and Windows 7, the program can be ran from “Start” and from the “Command Prompt”.
  • Click “Start”, go to All Programs > Accessories > System Tools, click Disk Cleanup. Next choose the type of files you wish to remove, click OK, followed by “Delete Files”.
  • Open up the Command Prompt, type “c:\windows\cleanmgr.exe /d” for XP and “cleanmgr” for Windows 7. Finish by pressing “Enter”.
• For Windows 8 and Windows 8.1, the Disk Cleanup Tool can be accessed directly from “Settings”. Click “Control Panel” and then “Administrative Tools”. You can select the drive that you want to run the clean up on. Select the files you want to get rid of and then click “OK” and “Delete Files”.
• For Windows 10, the process is simplified further. Type Disk Cleanup directly in the search bar and press “Enter”. Choose the drive and then the files that you wish to wipe. Click “OK”, followed by “Delete Files”.

The progressive ease with which the Cleanup Tool can be used points to the growing importance of regularly deleting temporary files and its place in preventing icacls.exe.

PRO TIP:
Remember to run the Disk Cleanup as an administrator.

Step 4 – Fix Infections and Eliminate Malware in Your PC

How do you gauge if your system is infected with a malware and virus?

Well, for one, you may find certain applications misbehaving.

And you may also see the occurrence of icacls.exe.

Infections and malware are the result of:

• Browsing the Internet using open or unencrypted public Wi-Fi connections
• Downloading applications from unknown and untrustworthy sources
• Intentional planting of viruses in your home and office networks

But thankfully, their impact can be contained.

• Enter “safe mode” by pressing the F8 key repeatedly when your device is restarting. Choose “Safe Mode with Networking” from the Advanced Boot Options menu.
• Back up all the data in your device to a secure location. This is preferably a storage unit that is not connected to your existing network.
• Leave program files as is. They are where the infection generally spreads from and may have been compromised.
• Run a thorough full-system scan or check of an on-demand scanner. If you already have an antivirus or anti-malware program installed, let it do the heavy lifting.
• Restart your computer once the process has run its course.
• Lastly, change all your passwords and update your drivers and operating system.

PRO TIP: Are you annoyed by the frequent updates to your antivirus program? Don’t be! These regular updates add new virus signatures to your software database for exponentially better protection.

Step 5 – Return to the Past to Eliminate icacls.exe

The steps outlined up until this point in the tutorial should have fixed icacls.exe error. But the process of tracking what has caused an error is a series of educated guesses. So in case the situation persists, move to Step 5.

Windows devices give users the ability to travel back in time and restore system settings to an uncorrupted, error free state.

This can be done through the convenient “System Restore” program. The best part of the process is the fact that using System Restore doesn’t affect your personal data. There is no need to take backups of new songs and pictures in your hard drive.

• Open “Control Panel” and click on “System & Security”.
• Choose the option “System”.
• To the left of the modal, click on “System Protection”.
• The System Properties window should pop-up. You’ll be able to see the option “System Restore”. Click on it.
• Go with “Recommended restore” for the path of least hassles and surprises.
• Choose a system restore point (by date) that will guarantee taking your device back to the time when icacls.exe hasn’t been triggered yet.
• Tap “Next” and wrap up by clicking “Finish”.

If you’re using Windows 7 OS, you can reach “System Restore” by following the path Start > All Programs > Accessories > System Tools.

Step 6 — icacls.exe Caused by Outdated Drivers

Updating a driver is not as common as updating your operating system or an application used to run front-end interface tasks.

Drivers are software snippets in charge of the different hardware units that keep your device functional.

So when you detect an icacls.exe error, updating your drivers may be a good bet. But it is time consuming and shouldn’t be viewed as a quick fix.

Here’s the step-by-step process you can go through to update drivers for Windows 8, Windows 8.1 and Windows 10.

• Check the site of your hardware maker for the latest versions of all the drivers you need. Download and extract them. We strongly advice going with original drivers. In most cases, they are available for free on the vendor website. Installing an incompatible driver causes more problems than it can ever fix.
• Open “Device Manager” from the Control Panel.
• Go through the various hardware component groupings and choose the ones you would like to update.
• On Windows 10 and Windows 8, right-click on the icon of the hardware you would like to update and click “Update Driver”.
• On Windows 7 and Vista, you right-click the hardware icon, choose “Properties”, navigate to the Driver panel, and then click “Update Driver”.
• Next you can let your device automatically search for the most compatible drivers, or you can choose to update the drivers from the versions you have on your hard drive. If you have an installer disk, then the latter should be your preferred course of action. The former may often get the driver selection incorrect.
• You may need to navigate a host of warnings from the Windows OS as you finalize the driver update. These include “Windows can’t verify that the driver is compatible” and “Windows can’t verify the publisher of this driver”. If you know that you have the right one in line, click “Yes”.
• Restart the system and hopefully the icacls.exe error should have been fixed.

Step 7 – Call the Windows System File Checker into Action

By now the icacls.exe plaguing your device should have been fixed. But if you haven’t resolved the issue yet, you can explore the Windows File Checker option.

With the Windows File Checker, you can audit all the system files your device needs to operate, locate missing ones, and restore them.

Sound familiar? It is almost like “System Restore”, but not quite. The System Restore essentially takes you back in time to a supposedly perfect set up of system files. The File Checker is more exhaustive.

It identifies what is amiss and fills the gaps.

• First and foremost, open up an elevated command prompt.
• Next, if you are using Windows 8, 8.1 or 10, enter “DISM.exe /Online /Cleanup-image /Restorehealth” into the window and press Enter.
• The process of running the Deployment Image Servicing and Management (DISM) tool may take several minutes.
• Once it completes, type the following command into the prompt “sfc /scannow”.
• Your device will now go through all protected files and if it detects an anomaly, it will replace the compromised version with a cached version that resides at %WinDir%\System32\dllcache.

Step 8 – Is your RAM Corrupted? Find Out.

Is it possible? Can the memory sticks of your device trigger icacls.exe?

It is unlikely – because the RAM chips have no moving parts and consume little power. But at this stage, if all else has failed, diagnosing your RAM may be a good move.

You can use the Windows Memory Diagnostics Tool to get the job done. Users who are on a Linux or Mac and are experiencing crashes can use memtest86.

• Open up your device and go straight to the “Control Panel”.
• Click on “Administrative Tools”.
• Choose “Windows Memory Diagnostic”.
• What this built-in option does is it burns an ISO image of your RAM and boots the computer from this image.
• The process takes a while to complete. Once it is done, the “Status” field at the bottom of the screen populates with the result of the diagnosis. If there are no issues with your RAM/memory, you’ll see “No problems have been detected”.

One drawback of the Windows Memory Diagnostic tool pertains to the number of passes it runs and the RAM segments it checks.

Memtest86 methodically goes over all the segments of your memory – irrespective of whether it is occupied or not.

But the Windows alternative only checks the occupied memory segments and may be ineffective in gauging the cause of the icacls.exe error.

Step 9 – Is your Hard Drive Corrupted? Find Out.

Your RAM or working memory isn’t the only culprit that may precipitate an icacls.exe error. The hard drive of your device also warrants close inspection.

The symptoms of hard drive error and corruption span:

• Frequent crashes and the Blue Screen of Death (BSoD).
• Performance issues like excessively slow responses.
• Errors like icacls.exe.

Hard drives are definitely robust, but they don’t last forever.

There are three things that you can do to diagnose the health of your permanent memory.

• It is possible that your device may have a hard time reading your drive. This can be the cause of an icacls.exe error. You should eliminate this possibility by connecting your drive to another device and checking for the recurrence of the issue. If nothing happens, your drive health is okay.
• Collect S.M.A.R.T data by using the WMIC (Windows Management Instrumentation Command-line) in the command prompt. To do this, simply type “wmic” into the command prompt and press Enter. Next follow it up with “diskdrive get status”. The S.M.A.R.T status reading is a reliable indicator of the longevity of your drive.
• Fix what’s corrupt. Let’s assume you do find that all isn’t well with your hard drive. Before you invest in an expensive replacement, using Check Disk or chkdsk is worth a shot.
  • Open the command prompt. Make sure you are in Admin mode.
  • Type “chkdsk C: /F /X /R” and press “Enter”. “C” here is the drive letter and “R” recovers data, if possible, from the bad sectors.
  • Allow the system to restart if the prompt shows up.
  • And you should be done.

These steps can lead to the resolution you’re seeking. Otherwise the icacls.exe may appear again. If it does, move to Step 10.

Step 10 – Update Windows OS

Like the software applications you use to render specific tasks on your device, the Operating System also requires periodic updates.
Yes, we’ve all heard the troubling stories.

Devices often develop problems post unfinished updates that do not go through. But these OS updates include important security patches. Not having them applied to your system leaves it vulnerable to viruses and malware.

And may also trigger icacls.exe.

So here’s how Windows 7, Windows 8, Windows 8.1 and Windows 10 users can check for the latest updates and push them through:

• Click the “Start” button on the lower left-hand corner of your device.
• Type “Updates” in the search bar. There should be a “Windows Update” or “Check for Updates” option, based on the OS version you’re using.
• Click it. The system will let you know if any updates are available.
• You have the convenience of choosing the components of the update you’d like to push through. Always prioritize the security updates.
• Click “OK” followed by “Install Updates”.

Step 11 – Refresh the OS to Eliminate Persistent icacls.exe Error

“Windows Refresh” is a lifesaver.

For those of you who are still with us and nothing has worked to eliminate the icacls.exe, until recently, a fresh install of Windows would have been the only option.

Not anymore.

The Windows Refresh is similar to reinstalling your Windows OS, but without touching your personal data. That’s hours of backup time saved in a jiffy.

Through the Refresh, all your system files become good as new. The only minor annoyance is the fact that any custom apps you’ve installed are gone and the system applications you had uninstalled are back.

Still, it is the best bet as the final step of this process.

• Enter the «Settings” of your PC and click on “Change Settings”.
• Click “Update and recovery” and then choose “Recovery”.
• Select “Keep my files”. This removes apps and settings, but lets your personal files live on.
• You’ll get some warning messages about the apps that will be uninstalled. If you’ve gone through a recent OS upgrade, the Refresh process makes it so that you can’t go back to your previous OS version – if you should ever feel the need to do it.
• Click the “Refresh” button.

Are you using an older version of Windows that doesn’t come with the power to “Refresh”?

Maybe it is time to start from scratch.

• Enter your BIOS set-up.
• This is where you need to change your computer’s boot order. Make it so that the boot happens not from the existing system files, but from the CD/DVD Drive.
• Place the original Windows disk in the CD/DVD drive.
• Turn on or restart the device.
• Choose where you’d like the system files to be installed.
• Your PC will restart several times as the process runs its course.

FAQ’s

Do EXE Issues Slow Down My Computer?

Issue with one or multiple files may point to the presence of some malicious code. Any malware or virus may slow down your PC during startup and/or while executing normal system operations.

Can I Edit the Windows Registry Myself?

It is a complicated thing to handle and you should only take it in your hand if you have the best knowledge about how critical the working dynamics of the Windows registry. If you have diagnosed the issue to be related with the Windows registry but not sure how to fix it, then professional help should be taken right away.

Do I Need to Reinstall Windows Because of icacls.exe Issue?

Installing a fresh copy of Windows does rectify the encountered file extension related issue, but it requires you to plan accordingly. First, reinstallation of Windows could be a time consuming job and may require professional help, in case you are a novice computer user. Secondly, you may lose your data as the hard drive is completely erased. However, you may backup all your data before beginning the reinstallation of Windows.

Start Download Now

Author: