Hi, Thanks for adding my suggestion, but: On page: The Administrators group may not be present on non-English copies of #1137 is: - system("echo y|cacls * /T /G Administrators:f "); + system("echo y|cacls * /T /G \"*S-1-5-32-544:F\" "); and: - system("echo y|cacls . /T /G Administrators:f "); + system("echo y|cacls . /T /G \"*S-1-5-32-544:F\" ");
cacls can't use SIDs, but *icacls *yes. should be: system("echo y|icacls * /T /grant \"*S-1-5-32-544:F\""); and system("echo y|icacls . /T /grant \"*S-1-5-32-544:F\""); Thank you again for your work. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.