Thanks, I missed that! On Mon, Jun 5, 2017 at 8:00 AM, <andrewm0...@gmail.com> wrote:
> Hi, > Thanks for adding my suggestion, but: > > On page: The Administrators group may not be present on non-English copies > of #1137 is: > - system("echo y|cacls * /T /G Administrators:f "); > + system("echo y|cacls * /T /G \"*S-1-5-32-544:F\" "); > and: > - system("echo y|cacls . /T /G Administrators:f "); > + system("echo y|cacls . /T /G \"*S-1-5-32-544:F\" "); > > cacls can't use SIDs, but *icacls *yes. > should be: > system("echo y|icacls * /T /grant \"*S-1-5-32-544:F\""); > and > system("echo y|icacls . /T /grant \"*S-1-5-32-544:F\""); > > Thank you again for your work. > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to ossec-list+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.