Using Windows 2012 R2 I am trying to understand iCACLS command to fix permissions on a folder.
Default permissions using iCACLS looks like:
NT AUTHORITY\SYSTEM:(F)
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
Looking at permissions in the GUI from the advanced dialog, SYSTEM account has full permissions. There are other ACE entries for other accounts but only the single entry for SYSTEM account.
When I attempt to reproduce the first ACE setting for SYSTEM permission using iCACLS or GUI and it comes out as:
NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
What is the additional ACE seen in iCACLS and how do i reproduce this?
-Jasper