ACL Checker?

From: Wm. Scott Miller (Scott.Miller_at_spamkillerwvinsurance.gov)
Date: 07/20/05 

Date: Wed, 20 Jul 2005 12:24:18 -0400

I've been having issues creating a new account on my Windows XP machine (all
latest updates installed). The issue was due to a incorrect ACL on a file
in my windows/system32 directory. I never touched this file directly, so
I'm thinking some installation did it as part of its install routine (most
likely overwritting the file and it getting a default set of ACLs). I have
"Use simple file sharing (Recommended)" turned off. I'm concerned that
something else is amiss and would like to find it or verify that my ACLs are
"what they should be". What I'm wondering is if there is a tool that will
check the ACLs on "expected" files to see if they are correct and/or correct
incorrectly set ACLs?

Thanks,
Scott

Relevant Pages

  • Re: Component Security
    ... but in Windows 2000 and windows 2003 Server you can ... go to Administrative tools, local Security Settings, in the Local Policies ... Create a security baseline prior to installation and take ... > another after to detect changes such as ACLs, ...
    (microsoft.public.sms.admin)
  • Re: Windows update and EFS
    ... >you use windows update all temporally installation files are created ... Not even Microsoft seems to grasp the complicated semantics of "copying vs. ... This again brings up the issues regarding ACLs and inherited ACLs under NTFS. ... Not what you'd like to see in your system directory. ...
    (NT-Bugtraq)
  • Re: ACL Checker?
    ... >I've been having issues creating a new account on my Windows XP machine (all ... The issue was due to a incorrect ACL on a file ... >I'm thinking some installation did it as part of its install routine (most ... >likely overwritting the file and it getting a default set of ACLs). ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Can we really block users from installing applications through Group policy?
    ... through ACLs on registry keys like "Software". ... have only read only access on some of them installation packages won't ...
    (Focus-Microsoft)
  • Re: security in .NET: protecting application data FROM users!?
    ... The problem with using ACLs is that the current user still has access ... thus the need for the app to impersonate a more powerful ... >> the machine during installation that has more ACL permissions than ...
    (microsoft.public.dotnet.security)