no options displays the security on the object. /I Inheritance flags: T: This object and sub objects S: Sub objects only ...

no options       displays the security on the object.     /I               Inheritance flags:                         T: This object and sub objects                         S: Sub objects only                         P: Propagate inheritable permissions one level only.     /N               Replaces the current access on the object, instead of                     editing it.     /P               Mark the object as protected                        Y:Yes                        N:No                     If /P option is not present, current protection flag is                     maintained.     /G  :                     Grant specified group (or user) specified permissions.                     See below for format of  and      /D  :                     Deny specified group (or user) specified permissions.                     See below for format of  and      /R   Remove all permissions for the specified group (or user).                     See below for format of      /S               Restore the security on the object to the default for                     that object class as defined in AD DS Schema. This option                     works when dsacls is bound to NTDS. To restore default                     ACL of an object in AD LDS use /resetDefaultDACL and                     /resetDefaultSACL options.     /T               Restore the security on the tree of objects to the                     default for the object class.                     This switch is valid only with the /S option.     /A               When displaying the security on an AD DS                     object, display the auditing information as well as                     the permissions and ownership information.    /resetDefaultDACL Restore the DACL on the object to the default for                     that object class as defined in AD DS Schema.    /resetDefaultSACL Restore the SACL on the object to the default for                     that object class as defined in AD DS Schema.    /takeOwnership    Take ownership of the object.    /domain: Connect to ldap server using this domain account                        of the user.    /user:  Connect to ldap server using this user name. If this                     option is not used dsacls will bind as the currently                     logged on user, using SSPI.    /passwd: | * Passwd for the user account.    /simple           Bind to server using ldap simple bind. Note that the                     clear text password will be sent over the wire.