Windows – Icacls works from command line, not from batch file

batch-fileicaclspermissionswindowswindows-server-2012

The OS is Windows server 2012.

I am trying to use command icacls C:\folder\targetfile /grant domain\usergroup:(rx) to give permissions on certain file.

The command works when executed on command line.

But when I run it from batch file I get the following error:

domain\usergroup: No mapping between account names and security IDs was done.
I am executing this command as domain admin. Domain admin has full control over target file and folder. Local admin works no better.
I also get same when trying to execute batch from Task Scheduler.

How can I make this work from batch file?

Best Answer

Comment by pgr pointed me to the right direction: The problem was caused by letter ö in the name of the group.

If I change target group to one that has no nordic letters in its name it works fine.

Though I got the problem solved, it would still be nice to know if there is way to make batch file work with those characters.

EDIT: As pointed out in the comment, the command chcp 1252 before icacls solves the problem.

Related Solutions

Windows – Why is execution of batch files different between drag & drop and from command line

When you run your batch file from the command line, the current directory is the location of your batch file.

When you drag-and-drop a file onto the batch file, the current directory is the path of the drag-and-dropped file instead.

To demonstrate this, try it with the following batch file:

@echo off
cd
pause

Icacls variables in batch file

I found that I needed to add cmd /c to the beginning of the icacls command.

My batch file looks like this:

for /f "tokens=*" %%i in (%1) do (
        cmd /c "icacls.exe F:\home\%%i /grant %%i:(oi)(ci)(m)"
    )
)

This works fine for me.

Best Answer

Related Solutions

Windows – Why is execution of batch files different between drag & drop and from command line

Icacls variables in batch file

Related Topic