Re: Why do some folders/registry keys have 2 permissions instead of 1?

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 02/01/05


Date: Mon, 31 Jan 2005 16:38:40 -0700


<w2k_user@nospam.com> wrote in message
news:0ipsv0hrdna5ilp3dmq48jfmjc55ofkrot@4ax.com...
> Thanks, Roger. I'll have to assume Windows XP does the same thing.
>
> If Microsoft or someone else could just write a command line utility to
> display all the ACEs the same way that Explorer and Regedt32 do, then
> that'd
> be a perfect solution.
>

Indeed. Or better yet, define a "canonicalization" for the standard set of
ACEs and header bits used for X and then provided a utility that would
walk over ACLs and canonicalize them. As it is, the routines are obviously
there in some dll that can present something of a canonical view, but it
does
not rewrite the ACLs, and we are left to reinvent the wheel.

-- 
Roger Abell
>
> On Mon, 31 Jan 2005 08:25:40 -0700, "Roger Abell" <mvpNOSpam@asu.edu> 
> wrote:
>
>>It gets even worse if you have storage that was once on an NT4
>>system that underwent upgrade.
>>
>>AFAIK there is no overall answer to you, but rather just the
>>fact that the ACEs are adjusted by a variety of routines, not
>>all of which did things the same way.  About the only common
>>thing is that what gets shown in Explorer's ACL editor is
>>digested such that when there are multiple ACEs that can
>>be shown with a generic ACE they are shown with one, even
>>though the actual SD has this represented not with a generic.
>>
>>I once attempted something similar to what you are trying,
>>and eventually  gave up due to the unending maze of complex
>>variations, especially for inherited ACEs.
> 


Relevant Pages

  • Re: Why do some folders/registry keys have 2 permissions instead of 1?
    ... define a "canonicalization" for the standard set of ... ACEs and header bits used for X and then provided a utility that would ... not rewrite the ACLs, and we are left to reinvent the wheel. ... Roger Abell ...
    (microsoft.public.win2000.registry)
  • Re: Why do some folders/registry keys have 2 permissions instead of 1?
    ... define a "canonicalization" for the standard set of ... ACEs and header bits used for X and then provided a utility that would ... not rewrite the ACLs, and we are left to reinvent the wheel. ... Roger Abell ...
    (microsoft.public.win2000.general)
  • Re: Output Varies from Show Access-List Command
    ... config. ... return path so that you don't need to specifically configure static ACEs ... ACLs from an access control server? ... access-group statement, we observed many many un-numbered ACEs ahead ...
    (comp.dcom.sys.cisco)
  • Re: Exch2003 - Add a public delegate?
    ... Can you describe the steps required and library dependencies? ... I'm already familiar with CDO and working with ACLs and ACEs. ... You'll need to learn how to use the directory features, work with ACLs and ACEs, and apply properties. ...
    (microsoft.public.exchange.development)
  • Re: Samba / CIFS and ACLs
    ... There are two types of ACEs that can be in ACLs. ... Advanced Server ACEs and OpenVMS ACLs. ... Advanced Server ACEs are interpreted in the same way that Microsoft group access is handled by Advanced Server. ...
    (comp.os.vms)

Quantcast