Is there a tool to generate SDDL (Security Descriptor Definition Language) strings?
-
27-05-2021 - |
سؤال
Is there a tool to generate SDDL (Security Descriptor Definition Language) strings? I'd like to create them through Windows' Security property sheet or something similar.
المحلول
One way is to set the ACL on a file (using the standard property sheet -- i.e. right click and choose Properties
, then go to the Security
tab), then use CACLS filename /S
to display the resulting ACL in the SDDL format.
نصائح أخرى
For those who want to get the SDDL string for registry keys permissions you can use PowerShell:
Get-Acl -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" | Format-List
لا تنتمي إلى StackOverflow