I may be being daft, but is there a way using icacls.exe to replicate the "replace" functionality you could get in cacls.exe by omitting the /E switch?
the grant:r switch in icacls seems to just replace the specified user's permissions, not all of them I want to edit a folder's ACL so that all other perms are removed and one user only added to the ACL Cheers, -- *James Rankin* Technical Consultant (ACA, CCA, MCTS) http://appsensebigot.blogspot.co.uk
