Permissions not applied to folder on Brazilian machine

[ur]

I am applying permissions to a folder using RunWait by icacls.

It is working correctly on windows 10 64bit english machine.

But when I ran on the Brazilian machine, it is not applying.

So ran the command manually on the brazilian machine and got below error.

Operation failed Return code 1332.

And it described as "No mapping between account names and security IDs was done."

And I understood Users is written as Usuarios in the Brazilian machine.

But how to set permissions to Users folder using a language independent code so that it would apply to all the machines even the languages are different.

 

 

[Musashi]

This is not my area of expertise, but take a look e.g. at https://ss64.com/nt/icacls.html

user   A user account, Group or a SID

 

[ur]

Well the syntax is correct but not working on non-english machines.

As on non-english it is not able to detect Users group.

 

Is there any alternative instead of icacls to set permissions (any AUtoIT specific code), to apply permissions on any machine, despite of language.

 

[Nine]

You could use CLSID of special folders.  Or refer to shell.application to find the "real" folder name by using special shell name :

$sFolder = $oShellApplication.Namespace('shell:My Pictures').Self.Path

There is also a number of folder constants that can serve as folder namespaces with shell.application object too.

[ur]

Not the users folder. But for users group.

 

[Musashi]

1 hour ago, ur said:

Not the users folder. But for users group.

List of groups :

_GetLocalGroupInfos()

Func _GetLocalGroupInfos()
    Local $objWMIService, $oColItems
    $objWMIService = ObjGet("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
    If Not IsObj($objWMIService) Then
        SetError(1)
        Return 0
    EndIf
    $oColItems = $objWMIService.ExecQuery("Select * from Win32_Group Where LocalAccount = True")

    For $objItem In $oColItems
        ConsoleWrite(" ------------------------------------------------------ " & @CRLF)
        ConsoleWrite("Name .......  : " & $objItem.Name & @CRLF)
        ConsoleWrite("Caption ....  : " & $objItem.Caption & @CRLF)
        ConsoleWrite("Description . : " & $objItem.Description & @CRLF)
        ConsoleWrite("Domain ...... : " & $objItem.Domain & @CRLF)
        ConsoleWrite("Local Account : " & $objItem.LocalAccount & @CRLF)
        ConsoleWrite("SID ......... : " & $objItem.SID & @CRLF)
        ConsoleWrite("SID Type .... : " & $objItem.SIDType & @CRLF)
        ConsoleWrite("Status ...... : " & $objItem.Status & @CRLF)
    Next
EndFunc   ;==>_GetLocalGroupInfos

Use the SID of the desired group. Set the permissions with icacls by using the SID (add an asterisk as prefix to tell icacls this is a SID) :

Example : icacls d:\ /grant *S-1-5-32-545:(OI)(CI)(M,W,RX)