icacls "C:\folder" /grant user:(OI)(CI)M /T REM (OI) = Object Inherit → Applies on files inside folders REM (CI) = Container Inherit → Applies on FUTURE subfolders REM M = Modify REM /T = Applies on EXISTING subfolders