NTFS Permissions (icacls)

Decode icacls output into Explorer's terms (who, what, applies to) and build icacls or PowerShell commands to grant, deny or remove permissions.

icacls prints NTFS permissions as CONTOSO\Sales:(OI)(CI)(M); Explorer shows the same thing as "Modify, applies to this folder, subfolders and files". Paste icacls output to read it in Explorer's terms, with each right spelled out, or build the command (and the PowerShell equivalent) to grant, deny or remove a permission. Masks, display rules and the generated commands were checked against icacls and Get-Acl on Windows; see Microsoft's icacls reference.