Re: Localized Group Names or ids?

Thanks a lot.

Is there a correspondingly easy way to generate the ACL a folder *should*
have? Or is the "best" way to CreateDirectory passing NULL for the
SECURITY_DESCRIPTOR*, and then modify the ACL of the created directory?

I mean, lots of code samples just generate a ACL containing full access for
everyone, or full access to Admins and read access for everyone... or
something similar.

However, browsing my PC I see folders with vastly more entries on the ACL.
Im worried that creating an ACL from scratch I might lock out some important
service functionality.


"Kalle Olavi Niemitalo" <kon@xxxxxx> wrote in message
news:874pbuiwtq.fsf@xxxxxxxxxxxxxxxxxxxx
"Chris Becke" <chris.becke@xxxxxxxxx> writes:

I then create an EXPLICIT_ACCESS struct and set the Trustee.pstrName =
TEXT("Users"); which I try to add back to the ACL using SetEntriesInAcl.

This call fails on non english systems. Not unexpectedly.

On Windows XP, you can use CreateWellKnownSid with WinBuiltinUsersSid,
then BuildTrusteeWithSid.

Windows 2000 does not support CreateWellKnownSid though.
So you should instead use AllocateAndInitializeSid.
IIRC, the parameters are SECURITY_NT_AUTHORITY,
SECURITY_BUILTIN_DOMAIN_RID, and DOMAIN_ALIAS_RID_USERS.


.

Relevant Pages

  • Re: Newbie security programming questions
    ... > I am trying to get to the GUI described in this page to change the ACL ... > Is GUI ACL viewer not available with all versions of Windows? ... How to disable simplified sharing and set permissions on a shared folder ...
    (microsoft.public.platformsdk.security)
  • Re: Permissions on System Volume Information
    ... Logged in as a local administrator I am able to edit the ACL. ... Administrators show as the owner of the folder. ... Under Windows 2003, I'm seeing SYSTEM listed with Full Control. ...
    (microsoft.public.win2000.security)
  • Re: Word (program) question
    ... .acl files are named the same (and that you transfer the correct .acl ... dictionary file over from a folder of one name on the previous computer to ... Professional computer but not on my Windows XP professional computer, ...
    (sci.med.transcription)
  • Re: Localized Group Names or ids? (resolved) (kinda)
    ... permissions list using the explorer rights control is the same as passing ... Or is the "best" way to CreateDirectory passing NULL for the ... and then modify the ACL of the created directory? ... On Windows XP, you can use CreateWellKnownSid with WinBuiltinUsersSid, ...
    (microsoft.public.platformsdk.security)
  • Re: Problems with AppData on Vista.
    ... Its actually the ACL stuff im most unsure about. ... traditionally has had to run on Windows 9X where the security APIs simply ... CreateDirectory - specifically in the Common_AppData folder, ...
    (microsoft.public.platformsdk.security)