ACL/ File security template

spam_at_nospam.com
Date: 02/10/04


Date: Mon, 9 Feb 2004 18:17:48 -0800

Hi all,

I wanted to know if there is a tool available that dumps
the current security permissions in a format that can be
read by the security and configuration analysis snapin.
In 2000 you can import a template with these file settings
and can compare them to your current configuration.

Here is an example of some NTFS file settings:
"%SystemRoot%\explorer.exe",2,"D:P(A;;GRGX;;;BU)
(A;;GRGX;;;PU)(A;;GA;;;BA)(A;;GA;;;SY)(A;;GRGX;;;WD)"
"%SystemDirectory%\ntoskrnl.exe",2,"D:P(A;;GRGX;;;BU)
(A;;GRGX;;;PU)(A;;GA;;;BA)(A;;GA;;;SY)"
"%SystemDirectory%\hal.dll",2,"D:P(A;;GRGX;;;BU)
(A;;GRGX;;;PU)(A;;GA;;;BA)(A;;GA;;;SY)"
"%Systemroot%\_default.pif",2,"D:P(A;;GRGX;;;BU)
(A;;GRGX;;;PU)(A;;GA;;;BA)(A;;GA;;;SY)"
"%Systemdirectory%\12520437.cpx",2,"D:P(A;;GRGX;;;BU)
(A;;GRGX;;;PU)(A;;GA;;;BA)(A;;GA;;;SY)(A;;GRGX;;;WD)"
"%Systemdirectory%\12520850.cpx",2,"D:P(A;;GRGX;;;BU)
(A;;GRGX;;;PU)(A;;GA;;;BA)(A;;GA;;;SY)(A;;GRGX;;;WD)"

I need to have this because with the tool that comes with
windows 2000 you can only compare your original settings
with the ones you import from whichever template you
choose. That would mean that I would loose my origal
settings if I configure it that way.

If I have a tool that dumps my file settings I can add
them to my own template.

Sincerely,
J