title: Using DSACLS grant security permission to Users Object
body: <p>I'm trying to use <code>DSACLS</code> command to grant specific permission to a User object. <code>DSACLS</code> command will only available if you have AD-Snapin installed. </p>
  
  <p>When I run this command on a User object, it will list all of its object security permissions:</p>
  
  <p><code>dsacls "CN=Aaron Ooi,OU=Users,OU=IT,DC=Domain"</code></p>
  
  <p>The permission that I want is from the list called:</p>
  
  <p><code>Allow BUILTIN\Windows Authorization Access Group
     SPECIAL ACCESS for tokenGroupsGlobalAndUniversal
            READ PROPERTY</code></p>
  
  <p>How do I use this command to apply the similar permission above to another User account? I cant seem to figure it out from the help menu.</p>
  
  <p>If similar requirements could be done in <code>PowerShell</code> would be great as well.</p>