How can I read and modify the Integrity Labels of specified user folders and files on Windows 7 and later via the command line. For my use case, I need the command to be able to read the Integrity Labels without requiring admin privileges.
By Integrity Label, I mean:
an Integrity Level: typically
NO-EXECUTE-UP, or arbitrary combinations thereof,
inheritance flags: e.g.
IO(Inherit Only) and so on.
I cannot find a native Windows command to do this. I have tried a few 3rd-party apps, but have run into the problems specified below.
Here is what I've tried so far:
CACLS.EXE - no support.
ICACLS.EXE - fully supports (1) and (3), but not (2) - it only does
CHML.EXE by Mark Minasi http://www.minasi.com/apps - fully supports (1) and (2) and (3),
, but not (3) - you can only get (OI)(CI), or nothing, but it doesn't support Unicode file or folder names.
SETACL.EXE by Helge Klein https://helgeklein.com/setacl - fully supports (1), (2) and (3), but incorrectly requires admin privileges just to read a mandatory label (which kills my use case).