Change NTFS ACL via command-line

[Guest itrcb4]

To change NTFS ACL via command-line, for multiple machines --

Is the "cacls" or "icacls" the best tool to use, or are there better ways?

 

Thanks in advance.