Access Inheritance Flags

Russell Smith

October 13, 2009

1 Min Read
ITPro Today logo in a gray background | ITPro Today

To help you better understand the information in this article, here’s a brief description of container Access Inheritance Flags, which are used to represent inheritance settings in command line programs such as cacls:

  • (IO) Inherit Only – The ACE doesn’t affect the object to which it applies.

  • (OI) Object Inherit – The ACE will affect subordinate files.

  • (CI) Container Inherit – The ACE will affect subordinate folders.

For instance, (OI)(CI) together means that the ACE applies to sub folders, but not files and does not affect the object to which it applies. In the GUI, this would be represented as Subfolders only. (IO)(CI)(OI) would be represented by Subfolders and files only in the GUI. The permissions do not apply to the object where the ACE is applied, but propagate to sub folders and files.

  • F – Full Control

  • R – Read

  • C – Modify (Change)

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like