Repacls Versions Save

Enhanced /ReplaceMap to take an optional "|DACL,SACL,OWNER" string that can be appended to the replacement file name in order to control which parts of the security descriptor that are manipulated.
Added /CopyMap that can be used to specify an input file with account mappings. Each line must contain a source account and a destination account separated by a colon.
Added /RemoveStreams to remove alternate data streams from files. This is similar to Sysinternals 'stream.exe -s -d' command but will remove the read-only attribute from the file if necessary to ensure deletion is successful.

32-Bit Executable https://github.com/NoMoreFood/Repacls/raw/v1.17.0.1/Build/Release/x86/repacls.exe

64-Bit Executable https://github.com/NoMoreFood/Repacls/raw/v1.17.0.1/Build/Release/x64/repacls.exe

4 years ago

Added /LocateHash which can search a file system for a file with the specified hash.
Optimized /Locate so it does not need to re-query the file system for file system attributes and can leverage the information gathered on the initial directory enumeration.
Corrected issue with /GrantPerms being parsed as /DenyPerms.

32-Bit Executable https://github.com/NoMoreFood/Repacls/raw/v1.14.0.0/Build/Release/x86/repacls.exe

64-Bit Executable https://github.com/NoMoreFood/Repacls/raw/v1.14.0.0/Build/Release/x64/repacls.exe

4 years ago

Added /GrantPerms and /DenyPerms. This command will ensure the account specified has the specified access to the path and all subdirectories/files within the path either via explicit or inherited permissions. The parameters of the command (<Name|Sid>:<Flags>) is the same of that from ICACLS. For example, /GrantPerms Auditor:(CI)(OI)(RX) will check if 'Auditor' account has 'Read' to all subdirectories and, if it does not, will add read permissions with container and object inheritance enabled. This command is often useful to correct issues where a user or administrator has mistakenly removed an group from subdirectories due to intentionally broken inheritance. This command replaces /AddAccountIfMissing <Name|Sid> which is now aliased to /GrantPerms <Name|Sid>:(CI)(OI)(F).
Correct variety of typos in help documentation. (Thanks Alex Hempy!)

32-Bit Executable https://github.com/NoMoreFood/Repacls/raw/v1.12.0.0/Build/Release/x86/repacls.exe

64-Bit Executable https://github.com/NoMoreFood/Repacls/raw/v1.12.0.0/Build/Release/x64/repacls.exe

5 years ago

Address error handling in /CopyDomain where a corrupt ACL could cause a crash due to SetEntriesInAcl() returning an invalid pointer.
Added /CanonicalizeAcls operation that will reorder access control entries that to do not follow the canonical ordering (i.e., explicit deny, explicit allow, inherited deny, inherited allow).

32-Bit Executable https://github.com/NoMoreFood/Repacls/raw/v1.11.0.1/Build/Release/x86/repacls.exe

64-Bit Executable https://github.com/NoMoreFood/Repacls/raw/v1.11.0.1/Build/Release/x64/repacls.exe

5 years ago

Corrected issue where path values within the file created by /Log where appended with an unnecessary newline character.
Updated account missing warning messages for /CopyDomain and /MoveDomain to include the part of the security descriptor affected and the target domain.

32-Bit Executable https://github.com/NoMoreFood/Repacls/raw/v1.10.0.2/Build/Release/x86/repacls.exe

64-Bit Executable https://github.com/NoMoreFood/Repacls/raw/v1.10.0.2/Build/Release/x64/repacls.exe

5 years ago

Added /Log option to tee all console output to a file (see help).
Modified /CopyDomain to display warnings when target domain accounts are not found.
Various other minor changes

32-Bit Executable https://github.com/NoMoreFood/Repacls/raw/v1.10.0.0/Build/Release/x86/repacls.exe

64-Bit Executable https://github.com/NoMoreFood/Repacls/raw/v1.10.0.0/Build/Release/x64/repacls.exe