Access Control List Repair Utility for Vista/7 by asilaydyingdl
The screenshot provided is not a screenshot of the utility, since the utility is just command scripts.
NOT TESTED ON WINDOWS 8! I will NOT be able to provide Win8 support, I am not the original creator of the script (see description for credits)!
If anyone out there wants to turn these scripts into an application with its own pretty UI, please do it! Just credit myself and those listed below for their work.
Commands were provided by Gary Bouchard and Giorgio Gamberini @
the Windows Developer Center. The original forum is available
What are Access Control Lists?
An access control list (ACL), with respect to a computer file system,
is a list of permissions attached to an object. An ACL specifies
which users or system processes are granted access to objects, as
well as what operations are allowed on given objects. Each entry in a
typical ACL specifies a subject and an operation. For instance, if a
file has an ACL that contains (Alice, delete), this would give Alice
permission to delete the file. (Definition from:
Sometimes, your ACLs can become corrupted for one reason or another.
Since these are tied into your registry on Windows based systems,
system instability and crashes may result. Important services may
fail to launch as well at startup. One particular service is the
Windows Event Log, which is responsible for maintaining records of all
activity on your PC in the event of an error. These logs are
accessible through the Event Viewer, which can be opened through the
search dialog on your start menu. Not having access to these logs
may make it difficult and more time consuming to correct problems with
To run this repair utility, please follow these instructions.
1. Create a system restore point.
To do this, open your start menu and search for "Create a Restore Point."
Open it up and select "Create..." Give your Restore Point a name and your
PC will do the rest.
2. Install the subinacl.msi.
Double click on the subinacl.msi file provided with the download. If
it does not work for some reason, you can find the download from the
Microsoft Website here:
3. Run the "reset.cmd."
Right click on the "reset.cmd" file and Run it as Administrator. This
Operation can take anywhere from several minutes to half an hour or more,
depending on the speed of your system. Some operations may fail. This
normal. The majority will succeed.
**Note: If you are using 64 bit windows, edit the file using notepad and change the line:
cd /d "%ProgramFiles%Windows Resource KitsTools"
cd /d "%ProgramFiles(x86)%Windows Resource KitsTools"
Save and run again. If you are using a non-English version of windows, you also need to change "administrators" and "system" to your system locality's translation. For example, if you are using a Portuguese version of windows, you need to change "administrators" and "system" to "Administradores" and "Sistema". Once you changed these words to match your system's locality, save and run again.
Thanks to UrsoBR for the tip!**
4. Run the "command.cmd."
Run the "command.cmd" as the administrator (right click and run as
administrator). This operation will take a matter of seconds.
5. Restart your computer. If everything is working as normal, then
creat another restore point.
Done! Your ACLs are reset.
At first, it did not run (it displayed the message that "subinacl was not a recognized command"), but I found that it was because my Windows 7 installation is 64-bit; so, on step 1, subinacl is installed under "C:\Program Files (x86)". I solved that problem editing "reset.cmd" with Notepad and replacing the line:
cd /d "%ProgramFiles%\Windows Resource Kits\Tools"
cd /d "%ProgramFiles(x86)%\Windows Resource Kits\Tools"
The problem was solved, but then I got another problem: all commands in "reset.cmd" sent the message "Security identification structure invalid." They also said there was a syntax error.
Analyzing the command file again, I found the reason: I am from Brazil, so I use a Brazilian Portuguese-language version of Windows. So, I had to replace the words "administrators" and "system" by their Portuguese translations: "Administradores" and "Sistema". Then the routine ran normally and successfully as intended through the end.
So, attention users of 64-bit Windows or non-English editions: you will have to edit the "reset.cmd" file as explained above. (The system variables %ProgramFiles% and %ProgramFiles(x86)% are language-independent and must not be changed, regardless of the system's interface language; only the user group names should be translated.)
Dustin, I suggest you add these tips to the README file.
i changed access controls manually before, because i got annoyed from windows telling me that i dont have the access rights to access my own folders. i followed some web-helb-forum-site-thing. now i can access nearly all folders, only the various links dont work anymore. "access denied" is bothering me just as much as the situation before. plus, many of my icons are gone and have been replaced by the same windows standard link icon. this is even more annoying. after i tried all the tips I found on the web (delete icon database, set max icon cache etc.) and having found they dont work, i would like to restore the original access controls, hoping that this is the root of the problem.
I followed the steps described above, but found (3) is not working.
The next moment after I run the reset.cmd it says: "the command "subinacl" is either spelled wrong or could not be found" several times, also for "system drive" and "windows directory". (roughly translated from german...)
Is there somehow a manual way to do, what reset.cmd does?!
win 7 home premium, SP1
i5, 4GB RAM, 64bit
*hoping for help*
thanks a lot... -himbeere
well, not knowing what I was doing [really stupid, I know] I just changed the whole C:drives access control, I took over ownership of the whole c: drive. I am guessing that thats the problem. Because I started afresh, whole new system and most definitely no malware got on it...
I replaced the most frequently used icons manually just as you suggested, e.g. Word. Only: all my doc-files (an all the other corresponding files) don't show the word-icon anymore as well... I guess I'll have to find out some other way - or just live with it.
thanks anyways for your help!
Importantly - quickly and conveniently
Thank you for your instructions!
I got a bad virus last week, and it tore apart my ACL... Lost access to EVERYTHING, except from Task Manager and CMD. Had to Re-image my pc (lost a lot of stuff...)
Hope I never have to use this, but thanks for making it. It may come in handy.
the ACLs get messed up pretty easily when:
You use a other disk then C:\ for your user folder
As that's my case.. i'm going to try this
Think it will be along run (allmost 9TB disk space)
Thanks for sharing this!
I will report back!