Re: How to get the file ACLs in C++ ?

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 04/30/05 

Date: Sat, 30 Apr 2005 10:24:51 -0400

Who told you the SDDL is unrealiable and why did they say it is?

Most likely, they simply didn't know how to read the SDDL. 

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Sudhakar Govindavajhala wrote:
> Hi,
> 
> [I am a Windows newbie. Aspiring to be a security expert.]
> 
> Given the name of a file or a file handle, I want to print all the ACLS of the
> file.  Can someone show me how to do it?
> 
> I wanted to use   GetExplicitEntriesFrom Acl, but I am told this:
> 
> "GetExplicitEntriesFromAcl() does not take into account any inherited ACEs
> that may be in the list. It only shows you the protected ACLs."
> 
> 
> I am told that SDDL is slightly unreliable. So I do not want to use SDDL.
> 
> I want to write my own code for getting the ACLs.
> 
> Can  someone help?
> 
> thanks,
> Sudhakar.
>

Relevant Pages

  • Re: How to get the file ACLs in C++ ?
    ... Or you can just take the SID strings and convert them ... > SDDL is unreliable, in his experience. ... >>Joe Richards Microsoft MVP Windows Server Directory Services ... It only shows you the protected ACLs." ...
    (microsoft.public.platformsdk.security)
  • How to get the file ACLs in C++ ?
    ... Aspiring to be a security expert.] ... I wanted to use GetExplicitEntriesFrom Acl, ... It only shows you the protected ACLs." ... I am told that SDDL is slightly unreliable. ...
    (microsoft.public.platformsdk.security)
  • Re: How to get the file ACLs in C++ ?
    ... maybe - it takes some practice to be able to read SDDL strings ... > AccessCheck. ... > machine on which the process tokens and file permissions were captured.) ... It only shows you the protected ACLs." ...
    (microsoft.public.platformsdk.security)
Quantcast