How can you change access permissions to global system objects?

From: Ed (goadeff_at_hotmail.com)
Date: 09/24/03 

Date: 23 Sep 2003 20:54:33 -0700

I was investigating why isobuster wouldn't browse CD drives under a
limited-user account, and auditing object access failures revealed
nothing in the event log until I turned on "Audit the access of global
system objects" in security options. Then I saw failed accesses to

C:
D:
\Device\Ide\IdePort0
\BaseNamedObjects\DINPUTWINMM

How do I change access permisions to such objects? File permissions
seem to have nothing to do with the C: and D: objects. I found a
downloadable tool for changing permissions on services and drivers
(scacl.exe) which was interesting, and I used it to change permissions
on various disk drivers, but it had no effect on isobuster's access to
these objects. Can access to these and related objects be changed?
How?

Ed

Relevant Pages

  • Re: Event Log Trust Level?
    ... Any idea on what permissions to give ASPNET (registry ... I don't fancy the installer option. ... >What I do in this case is install the event log as part ... >> source, String logName, String machineName, Boolean ...
    (microsoft.public.dotnet.security)
  • RE: What permissions do we set on registry keys?
    ... I would setup the event log in a Custom Action instead of just let the ... you don't need to worry about regkeys and permissions ... WiX is not officially supported by Microsoft at this time, ... Microsoft Online Community Support ...
    (microsoft.public.office.developer.com.add_ins)
  • Re: security exception within Microsoft Application Block ExceptionManager.vb
    ... I am in the registry now. ... > ASPNET account doesn't have permission to create EventLog's, ... > Accessing the Event Log ... > not have sufficient permissions to create new event sources. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: DNS Server entries within Event Viewer is empty
    ... Please check the size and the permission of the DNS server event log ... Administrators and System have Full Control permissions on this file. ... >> Microsoft Online Partner Support ...
    (microsoft.public.win2000.dns)
  • Re: ASPNET cant write in event log on win XP
    ... I also put ASPNET in ... >> Changing file and folder permissions isn't going to help anything. ... >> to change permissions for the Event Log. ...
    (microsoft.public.dotnet.framework.aspnet)
Quantcast