You're looking for information on the Security Descriptor Definition
Language. This seems to be the official MSDN page on the topic -
http://msdn.microsoft.com/library/en-us/secauthz/security/security_descr
iptor_definition_language.asp
It looks like my friends over at Uwash/Stanford came up with this page
on the topic as well -
http://www.washington.edu/computing/support/windows/UWdomains/SDDL.html
Brad Judy
Information Technology Services
University of Colorado at Boulder
-----Original Message-----
From: Rick Zhong [mailto:sagiko@gmail.com]
Sent: Monday, April 24, 2006 4:28 AM
To: focus-ms@securityfocus.com
Subject: File/Directory Permission Setting in Windows 2k/2003
Security Template
Hi,
Is there any listing or table to explain all the
abbreviations which are used in defining file/directory
permissions in windows security template? I googled quite a
bit and cannot find any useful info except openning the
template in mmc to view it from GUI.
For example:(Taken from win2003 security guide template -
SSLF-Domain Controller.inf )
[File Security]
"%systemRoot%\system32\tlntsvr.exe",1,"D:PAR(A;OIIO;FA;;;BA)(A
;OIIO;FA;;;SY)"
"%systemRoot%\system32\tftp.exe",1,"D:PAR(A;OIIO;FA;;;BA)(A;OI
IO;FA;;;SY)"
Any docs, tutorial or links to explain these permission
setting will be very helpful. Thanks.
regards,
Rick
--------------------------------------------------------------
-------------
--------------------------------------------------------------
-------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
