Is there a tool to generate SDDL (Security Descriptor Definition Language) strings?
-
27-05-2021 - |
Pergunta
Is there a tool to generate SDDL (Security Descriptor Definition Language) strings? I'd like to create them through Windows' Security property sheet or something similar.
Solução
One way is to set the ACL on a file (using the standard property sheet -- i.e. right click and choose Properties
, then go to the Security
tab), then use CACLS filename /S
to display the resulting ACL in the SDDL format.
Outras dicas
For those who want to get the SDDL string for registry keys permissions you can use PowerShell:
Get-Acl -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" | Format-List
Licenciado em: CC-BY-SA com atribuição
Não afiliado a StackOverflow