Re: ACL's Security

From: Sudeep Sachdev (sudeep_sachdev_at_yahoo.com)
Date: 11/30/04 

Date: 30 Nov 2004 04:37:28 -0800

"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message news:<UaIqd.484725$D%.374141@attbi_s51>...
> See the link below on special permissions at is lists each special
> permission that each general permission consists of. --- Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;308419
>
> "Sudeep Sachdev" <sudeep_sachdev@yahoo.com> wrote in message
> news:c1dd9064.0411282240.51d79898@posting.google.com...
> > Hi
> > I am implementing folder security through ACL's.
> > I need ACE for two standard access rights named 'MODIFY' and 'LIST FOLDER
> > CONTENTS'.

Hi
    Let's begin with an example .listed below are the ACE strings for
folder which gives all access rights to a folder.

#define SC_CONFIG_USER_DIR_DACL L"D:"\
                                                                                                              L"(A;OICI;GA;;;SY)"\
                                                                                L"(A;OICI;GA;;;BA)"\
                                                                                                        L"(A;OICI;GA;;;%s)"\

"GA" -- GENERIC_ALL
"GR" -- GENERIC_READ
"GW" -- GENERIC_WRITE
"GX" -- GENERIC_EXECUTE

So i want rights for 'Modify' and 'List Folder Contents' . For this a
need the corresponding ACE.

Relevant Pages

  • Re: KB893803 error code 0x80070005
    ... I was not aware of any limitation of my User Profile. ... could not open any System Volume Information folder. ... Profile enabled me to take ownership of one System Volume Information ... of one series of folders and needed Special Permissions to regain ...
    (microsoft.public.windowsupdate)
  • Re: KB893803 error code 0x80070005
    ... suggestion worked and the OP's Windows Installer installation issue is history. ... could not open any System Volume Information folder. ... Profile enabled me to take ownership of one System Volume Information ... of one series of folders and needed Special Permissions to regain ...
    (microsoft.public.windowsupdate)
  • Re: Folder Security Issue
    ... What you need to look at is to possibly use special permissions [in advanced ... configured is on the drive/root folder of an XP Pro computer. ... compared to the long term security of people not dragging and dropping ...
    (microsoft.public.windows.server.security)
  • Re: Deny folders creation/deletion without altering files accesses
    ... understand or can figure out special permissions. ... >> root folder of any default install of Windows XP pro. ... >>> accesses and prevent people from creating or deleting directories, ... >>> Is there any way of denying creation and deletion of folders while ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Deny folders creation/deletion without altering files accesses
    ... The key to special permissions is to realize that a user/group can be shown ... the general security page for the folder give the group read/list/execute. ... > Is there any way of denying creation and deletion of folders while still ...
    (microsoft.public.windowsxp.security_admin)