Is there a tool to generate SDDL (Security Descriptor Definition Language) strings?
-
27-05-2021 - |
Question
Is there a tool to generate SDDL (Security Descriptor Definition Language) strings? I'd like to create them through Windows' Security property sheet or something similar.
Solution
One way is to set the ACL on a file (using the standard property sheet -- i.e. right click and choose Properties
, then go to the Security
tab), then use CACLS filename /S
to display the resulting ACL in the SDDL format.
OTHER TIPS
For those who want to get the SDDL string for registry keys permissions you can use PowerShell:
Get-Acl -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" | Format-List
Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow