ICACLS Syntax for ACL Management

One of the great new tools in Windows Vista and Windows 7 is the ICACLS command line command. While I’m very annoyed with Microsoft for not supporting the old CACLS syntax and adding the features of ICACLS (all our old CACLS-based batch files break), I have to admit that a few capabilities are very welcome. One such capability is the function used to export and import ACLs from and into objects.

For example, imagine you are about to make several permission changes to a directory structure. You want to ensure you can revert to the current permission structure if you make mistakes. ICACLS allows you to quickly export the permissions for an entire directory structure with the /save switch.

The ICACLS syntax for ACL (or permission) export is as follows:

ICACLS folder_name* /save filename.acl /T

The /T switch is used to indicate that directory recursion should be used. The /save switch is used to export the results. For example, to save the permissions in a directory named HORSES on the C: drive and all subdirectories and folders, execute the following command:

ICACLS C:HORSES* /save horses.acl /T

The file, horses.acl, will contain the permissions in text format. Later, you can import the permissions with the /restore switch if required. To restore the permissions, execute the following ICACLS syntax:

ICACLS C:HORSES /restore horses.acl

Of course, the ICACLS command provides syntax for permission management as well as backing up and restoring the permissions; however, this new feature is one of the most important to know about. Hopefully, you find this information useful.

IPv6 Network Utilization on Windows 7

OK. For about a year now I've been telling you all that Windows 7's implementation of IPv6 by default will cause quite a bit of unnecessary activity on your network if you're not actually using it yet in the infrastructure. The numbers will be in soon.

Up to this point, I've only been telling you that a packet capture clearly shows the traffic generated by the IPv6 stack is significant when you consider dozens or hundreds of machines that may exist on a subnet. That's all about to change. I'm in the process of writing an article for Windows IT Pro magazine on the impact of IPv6 on a non-IPv6 network. In the process, I've built a lab of 24 virtual machines running Windows 7 with IPv6 out-of-the-box setup on an IPv4-only network infrastructure. I will be measuring the traffic generated by these machines.

Next, I will be enabling IPv6 on the infrastructure by doing the following:

-Enabling DHCPv6

-Enabling DNSv6

-Enable IPv6 on the Cisco routers(two will exist in the network)

Now, I will measure the network consumption when IPv4 is disabled on the network.

Finally, I'll measure the network consumption when IPv6 is enabled alongside IPv4 in both the Windows 7 clients and the infrastructure. When I'm done, I'll post the fast facts here and, of course, you'll be able to read all the details in Windows IT Pro magazine. I'll let you know the issue that will contain the article as soon as I find out.

Can you tell I'm excited about this lab fun I'm about to have?

Adjusting Hidden Display Features – Windows 7 Tip Series

This is the first post in a new series I'm starting called the Windows 7 Tips Series. This first tip will help you improve your display for laptop computers (and possibly some desktops). The first part of the tip is related to the Microsoft ClearType text feature and the second is about color calibration.

ClearType Text Tuning

You can adjust the ClearType text feature so that the text looks good to you. After all, isn't that the whole point. I don't know about you, but I love books – and I mean printed books. However, I don't like the fonts used in some books and find them harder to read. At the same time, the boldness and size of the font can have a big impact. Of course, what I like, someone else may dislike.

To tune the ClearType text to your liking, follow these instructions:

1) Click Start

2) Type cttune and press Enter

3) Step through the wizard to adjust the ClearType engine to your liking

Color and Brightness Calibration

You can also adjust the gamma and brightness/contrast for your needs using a wizard. To launch the Display Color Calibration wizard:

1) Click Start

2) Type dccw and press Enter

3) Step through the wizard to adjust your display colors and settings

Hopefully these little tips will help you configure your display for a more pleasant experience. These two steps are now the first steps I take when setting up a new laptop computer and I've even used them a few times on my desktops.