Click here to get back home

Utility to list SACL information of AD object?
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Utility to list SACL information of AD object? future2Bunknown 02-01-2007
Posted by future2Bunknown on February 1, 2007, 4:05 pm
Please log in for more thread options
 Any one knows a tool can do the same as dsacls.exe lists DACLs?


Posted by Paul Williams [MVP] on February 1, 2007, 4:32 pm
Please log in for more thread options
 Yeah, there's an RK tool but I can't remember the name nor find
it...typical.

There's also SUBINACL and the Open Source tool SETACL.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


Posted by Herb Martin on February 1, 2007, 5:07 pm
Please log in for more thread options

> Yeah, there's an RK tool but I can't remember the name nor find
> it...typical.
>
> There's also SUBINACL and the Open Source tool SETACL.

Hey Paul, I though SetAcl did AD stuff too, but when I first saw
his message a bit ago I went to look and can find no reference
to AD stuff.

http://setacl.sourceforge.net/
"Supported object types: files and directories, registry keys, printers,
services, network shares."

Maybe this is a "new completely rewrittent SetACL 2" issue.

It does still claim to do Auditing (SACLs) though.

But it is neat that it does Services now.

--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)



Posted by Paul Williams [MVP] on February 1, 2007, 5:22 pm
Please log in for more thread options
Ugh! I must have seen the words "directory" and "SACL" and simply
assumed... : (

I've not used the tool myself. Excluding DSACLS, most of the permissions
stuff I've done has been with the adv. GUI or VBScript. : ) (I know
you'll chuckle at the latter).

Yeah, pulling the security descriptor on services is cool. They seem to
have an almost complete product. I'll keep an eye on it...

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


Posted by Herb Martin on February 1, 2007, 5:41 pm
Please log in for more thread options

> Ugh! I must have seen the words "directory" and "SACL" and simply
> assumed... : (
>
> I've not used the tool myself. Excluding DSACLS, most of the permissions
> stuff I've done has been with the adv. GUI or VBScript. : ) (I know
> you'll chuckle at the latter).

Nothing wrong with that. And I swear that SetAcls used to do DS objects
even though I never used it for that.

> Yeah, pulling the security descriptor on services is cool. They seem to
> have an almost complete product. I'll keep an eye on it...

SubInAcls does this too now. /service

--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)



Similar ThreadsPosted
Command Line Utility for Audit List? December 30, 2006, 9:18 pm
Need some information about certificates March 9, 2006, 5:54 pm
Encryption information request September 20, 2006, 3:52 pm
Can I restric the access to information on user in the AD August 10, 2006, 12:12 pm
Extracting information from secedit database files (sdb) December 15, 2005, 4:28 pm
LimitLogon utility May 25, 2007, 9:01 am
FTC Loses Laptops - Compromises Information of Suspected Fraudsters June 24, 2006, 12:15 pm
System Volume Information folder visable on network! August 2, 2006, 4:11 am
Location of SFPCOPY.EXE Utility? May 6, 2007, 11:19 am
User account management and information functions usage with trusteddomains October 27, 2005, 3:55 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap