Svcacls.exe - Windows 2000 Resource Kit Utility

This command-line tool sets access control lists (ACLs) on service objects, enabling administrators to delegate control of services. To initially use Service ACL Editor, you must have Administrator privileges, although someone with Administrator privileges can use the tool to grant someone without Administrator privileges permission to use the tool. Delete, Read Control, and Write discretionary access control are required to modify discretionary access control lists (DACLs) for services. The DACL (usually referred to simply as ACL) determines the permissions on an object. To change a DACL, a permission called WRITE_DAC is required.