Re: Newbie security programming questions

From: OShah (shexec32_at_aol.com)
Date: 03/07/05 

Date: Mon, 07 Mar 2005 10:52:59 -0800

<snip>

"=?Utf-8?B?U3VkaGFrYXIgR292aW5kYXZhamhhbGE=?="
<sudhakarg79_re_move_me@hotmail.com> wrote in
news:42C7CE98-94DC-4180-8155-C8FEDB27E2B2@microsoft.com:

>> WhatIsAclInheritance
>>
http://pluralsight.com/wiki/default.aspx/Keith.GuideBook/WhatIsACLInheri
>> tance.html
>
>
>
> I am trying to get to the GUI described in this page to change the ACL
> lists. Unfortunately, I do not find any security related information
> after right clicking on the directory name. Am I missing something? I
> am WinXp SP1. Why am I not able to see the security permissions of
> folders in the GUI?
>
> Is GUI ACL viewer not available with all versions of Windows?
>
>
> winver says XP version 5.1
> build 2600.xpclnt_qfe.021108-2107

This is a <strikeout>very common bug</strikeout> feature of Windows XP. If
you are on XP Pro, you can get the ACL Editor by turning off simple file
and folder sharing (AKA ForceGuest):

How to disable simplified sharing and set permissions on a shared folder
in Windows XP Professional
http://support.microsoft.com/?id=307874

This only works in XP Pro. For Windows XP Home, you'll have to boot in
safe mode (or get a third party utility).

>> >
>> > I had some problems in getting SDDL to work. I had to add
>> >
>> > #define _WIN32_WINNT 0x0500 // Lets make SDDL happy.
>> > #include <Sddl.h>
>> > #include <sddl.h>
>> > #undef _WIN32_WINNT
>>
>> Well, I know why you had to define _WIN32_WINNT 0x500, because SDDL
>> is not available on Windows NT 4.
>>
>> I'm a little surprised that you had to include sddl.h twice. Are
>> you compiling on an OS that has case sensitive filenames?
>
>
> OK. it is not needed twice. I partly did that for no reason. The
> thing is I am doing this in a windows host running on top of Linux
> using VMWare and hence was just being "careful". But I do not need it.
>
>
> regards,
> Sudhakar
> 

-- 
------------------------------------------------------------------------
oshah [shexec32]
Control Panel -> System -> Advanced -> Error Reporting -> Choose Programs
-> Do not report errors for these programs:
Acrobat.exe
waol.exe
------------------------------------------------------------------------

Relevant Pages

  • Trouble with XCACLS.VBS and denying Execute access
    ... Full Control (This Folder, Subfolders and Files) ... If I change the permissions to look like those above through the GUI, ... The first line REPLACES the ACL for the current user with the Full Cont ...
    (microsoft.public.security)
  • Re: Trouble with XCACLS.VBS and denying Execute access
    ... the GUI ACL editior has been used to remove a grant set on \test1 ... > result is not the same as it is if done through the Win2K Security GUI. ... Full Control (This Folder, Subfolders and Files) ...
    (microsoft.public.security)
  • Re: Trouble with XCACLS.VBS and denying Execute access
    ... Strange how use of the shortcut in the xcacls.vbs set folder ... though ACL editor clearly shows this is granted and not denied. ... Full Control (This Folder and Subfolders only) ... > result is not the same as it is if done through the Win2K Security GUI. ...
    (microsoft.public.security)
  • Re: Permissions on System Volume Information
    ... Logged in as a local administrator I am able to edit the ACL. ... Administrators show as the owner of the folder. ... Under Windows 2003, I'm seeing SYSTEM listed with Full Control. ...
    (microsoft.public.win2000.security)
  • Re: Word (program) question
    ... .acl files are named the same (and that you transfer the correct .acl ... dictionary file over from a folder of one name on the previous computer to ... Professional computer but not on my Windows XP professional computer, ...
    (sci.med.transcription)