To help you better understand the information in this article, here’s a brief description of container Access Inheritance Flags, which are used to represent inheritance settings in command line programs such as cacls:
- (IO) Inherit Only – The ACE doesn’t affect the object to which it applies.
- (OI) Object Inherit – The ACE will affect subordinate files.
- (CI) Container Inherit – The ACE will affect subordinate folders.
For instance, (OI)(CI) together means that the ACE applies to sub folders, but not files and does not affect the object to which it applies. In the GUI, this would be represented as Subfolders only. (IO)(CI)(OI) would be represented by Subfolders and files only in the GUI. The permissions do not apply to the object where the ACE is applied, but propagate to sub folders and files.
- F – Full Control
- R – Read
- C – Modify (Change)