最近因工作需要，需要对批量服务器某一目录下的文件进行统一授权，对于linux来说，，授权很方便，对于window来说，要对目录下的文件进行批量授权还是很不方便的，windows平台授权自然想到用icacls或cacls工具来完成任务，且灵活。

用vbs脚本完成授权工作，以便远程调用批量执行

能指定授权目录

能指定授权方式，即只对目录授权还是对目录文件统一授权

若对文件授权，需递归遍历指定目录，对子目录文件也授权

指定授权用户

指定授予用户权限(如:RX,W,F)

基于以上需求，写了如下vbs脚本
If WScript.Arguments.Count = 0 then WScript.Echo "Usage: do_auth.vbs [-d|-f] [FilePath] [AuthUser]" WScript.Quit(1) end if Set WshShell = CreateObject("WScript.Shell") Set objFSO = CreateObject("Scripting.FileSystemObject") objAuthOption=WScript.Arguments(0) objStartFolder = WScript.Arguments(1) objAuthUser = WScript.Arguments(2) Set objFolder = objFSO.GetFolder(objStartFolder) ShowSubfolders objFSO.GetFolder(objStartFolder) Sub ShowSubFolders(Folder) ‘Wscript.Echo Subfolder.Path If objAuthOption = "-f" Then Set curFiles = objFSO.GetFolder(Folder.Path).Files For Each curFile in curFiles intRunError = WshShell.Run("icacls " & curFile.Path & " /grant " & chr("34") & objAuthUser & chr("34") & ":F ", 2, True) If intRunError <> 0 Then Wscript.Echo "Error assigning permissions for user " & objAuthUser & " to file " & curFile.Name Else Wscript.Echo "Success: file " & curFile.Name & " assigned user " & objAuthUser End If Next For Each Subfolder in Folder.SubFolders Set objFolder = objFSO.GetFolder(Subfolder.Path) Set colFiles = objFolder.Files For Each objFile in colFiles intRunError = WshShell.Run("icacls " & objFile.Path & " /grant " & chr("34") & objAuthUser & chr("34") & ":F ", 2, True) If intRunError <> 0 Then Wscript.Echo "Error assigning permissions for user " & objAuthUser & " to file " & objFile.Name Else Wscript.Echo "Success: file " & objFile.Name & " assigned user " & objAuthUser End If Next ShowSubFolders Subfolder Next ElseIf objAuthOption = "-d" Then For Each Subfolder in Folder.SubFolders intRunError = WshShell.Run("icacls " & Subfolder.Path & " /grant " & chr("34") & objAuthUser & chr("34") & ":F ", 2, True) If intRunError <> 0 Then Wscript.Echo "Error assigning permissions for user " & objAuthUser & " to folder " & Subfolder.Path Else Wscript.Echo "Success: folder " & Subfolder.Path & " assigned user " & objAuthUser End If ShowSubFolders Subfolder Next Else WScript.Echo "Parameter error" WScript.Quit(1) End If End Sub 总结

上述代码实现了文件中所列的需求，希望能帮助到大家

Icacls 在windows目录文件授权中的应用