Как предоставить/отменить доступ к папке для определенного пользователя?

cacls
xcacls

Example 1
The following command replaces the ACL of all files and directories in the current directory without scanning subdirectories and without confirmation.
XCACLS *.* /G administrator:RW /Y

Example 2
The following command edits the ACL of a file or a directory, but its effect on a directory is different. The ACE added to the directory is also an inherit ACE for new files created in this directory.

In this example, the command gives TestUser read, write, run, and delete rights on all new files created in this directory, but only read and write permissions on the directory itself.
XCACLS *.* /G TestUser:RWED;RW /E

Example 3
The following command grants read and write permissions on a directory without creating an inherit entry for new files. Therefore, in this example, new files created in this directory get no ACE for TestUser. For existing files, an ACE with read permissions is created.
XCACLS *.* /G TestUser:R;TRW /E