Matthieu,
After considering what the access rights FA is associated with, I think that
RPWPCCDCLCLORCWOWDSDDTSW is indeed mapped to FA if the logic is used. Please
look at the output below (also attached as DS-Created.txt and
SYSVOL-Created.txt)
In DS DACL, CCDCLCSWRPWPDTLOSDRCWDWO represents access mask of 0x000f00ff
Ace Mask: 0x000f00ff
DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_DELETE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_DELETE_TREE
ACTRL_DS_LIST_OBJECT
In SYSVOL DACL, "FA" is corresponding to :
Type of access:
Special acccess : -Read -Write -Execute -Delete -Change
Permissions -Take Ownership
Detailed Access Flags : 0x001F01FF
FILE_READ_DATA-0x1 FILE_WRITE_DATA-0x2
FILE_APPEND_DATA-0x4
FILE_READ_EA-0x8 FILE_WRITE_EA-0x10
FILE_EXECUTE-0x20 FILE_DELETE_CHILD-0x40
FILE_READ_ATTRIBUTES-0x80 FILE_WRITE_ATTRIBUTES-0x100
DELETE-0x10000 READ_CONTROL-0x20000
WRITE_DAC-0x40000 WRITE_OWNER-0x80000
SYNCHRONIZE-0x100000
From the debugging, access mask 0x000f00ff in DS DACL does map to
0x001F01FF in SYSVOL DACL.
After much of the investigation, I found that there is a little difference
between default Group Policies(Domain Default and Domain Controller Default)
and the ones created using GPMC. The SYSVOL DACL and DS DACL of the group
policy created through GPMC have exactly matching access masks(as per logic)
and even trustees. The order of ACEs inside DACL are exactly matching too.
Please see the attached dump files(DS-created.txt and SYSVOL-created.txt).
But for the default policies, the trustees and order of ACEs are different.
The access mask mapping appears fine except for the ones with GXGR in SYSVOL
DACL. Please see the attached dump files(DS-original.txt and
SYSVOL-original.txt). I will work on the further clarification for the default
policies. The logic we sent to you are right since they are used in GPMC
tools to set the DACL on the newly created policy and fix the consistency
problem as well.
Thanks!
Hongwei
-----Original Message-----
From: Matthieu Patou [mailto:[email protected]]
Sent: Wednesday, February 17, 2010 1:46 AM
To: Hongwei Sun
Cc: Sebastian Canevari; [email protected]; [email protected]
Subject: Re: [REG:110020183056252] - Inconsistencies in ACLs
Hello Hongwei,
On 17/02/2010 03:21, Hongwei Sun wrote:
> Matthieu,
>
> I now own the case for your new question regarding ACL on SYSVOL. First ,
> making ACL consistent between the DS object and the corresponding SYSVOL
> object only applies to the DACL part of the security descriptor, just as
> shown in the logic. Therefore, it can be explained why the owner and group
> SID could be different. Besides being consistent with SYSVOL folder
> object, DS objects also need to satisfy the security descriptor requirements
> for Active Directory , as described in 7.1.3 of MS-ADTS.
> As you suggested, I dumped the ACL of DS policy object and also dumped
> SYSVOL folder object's ACL using subinacl in Windows server 2008 R2.
>The output is similar to what you shown in your mail. After
debugging, it seems that the logic mapping access masks between DS
policy objects and SYSVOL folder objects is correct.
> For example, for the access mask (0x00020094 or "RPLCLORC" ) in DS
ACL, applying the logic will translate it to access mask of 0x001200A9
in SYSVOL folder ACL. This result matches the output of dump.
I a recopying what I sent
> So for instance a w2k3 server acting as a DC I have :
>
c:\WINDOWS\SYSVOL\sysvol\samba.net\Policies\{6AC1786C016F-11D2-945F-00C04fB984F9}
/sddl=
O:BAG:SYD:PARAI(A;;0x1200a9;;;AU)(A;OICIIO;GXGR;;;AU)(A;;0x1200a9;;;SO)
(A;OICIIO;GXGR;;;SO)(A;;FA;;;BA)(A;OICIIO;GA;;;BA)(A;;FA;;;SY)(A;OICIIO;GA;;;SY)(A;;FA;;;BA)(A;OICIIO;GA;;;CO)
>
So we have AU, SO, BA, SY and CO as trustees in the different ACE for
the DACL part.
> It was obtained from:
> subinacl.exe /file
> c:\WINDOWS\SYSVOL\sysvol\samba.net\Policies\{6AC1786C-016F-11D2-945F-0
> 0C04fB984F9} /display=sddl
>
> But if dump the ACL of the object
>
>
CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=Samba,DC=net
>
>
O:DAG:DAD:PAI(A;CI;RPWPCCDCLCLORCWOWDSDDTSW;;;DA)(A;CI;RPWPCCDCLCLORCWOWDSDDTSW;;;EA)(A;;RPWPCCDCLCLORCWOWDSDDTSW;;;DA)(A;CIIO;RPWPCCDCLCLORCWOWDSDDTSW;;;CO)(A;CI;RPWPCCDCLCLORCWOWDSDDTSW;;;SY)(A;CI;RPLCLORC;;;AU)(OA;CI;CR;edacfd8f-ffb3-11d1-b41d-00a0c968f939;;AU)(A;CI;RPLCLORC;;;ED)
S:AI(OU;CIIDSA;WPWD;;f30e3bc2-9ff0-11d1-b603-0000f80367c1;WD)(OU;CIIOIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CIIOIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)
here for the DACL part we have those trustees:DA,EA,CO,SY,AU,ED
From my understanding we should find the different trustees of the DS
ACL in the SYSVOL ACL (ie. something like '(A;;0x1200a9;;;ED)') then for
the trustees that are effectively present in the two ACLs (CO, or SY) we
have completely different ACL I'm not sure that RPWPCCDCLCLORCWOWDSDDTSW
translate only to FA.
Matthieu.
> -----Original Message-----
> From: [email protected] [mailto:[email protected]]
> On Behalf Of Sebastian Canevari
> Sent: Monday, February 01, 2010 5:29 PM
> To: Bill Wesse; Matthieu Patou
> Cc: [email protected]; [email protected]
> Subject: Re: [cifs-protocol] Status: SRX091112600382 [MS-GPOL] - OI and CI
> flags on every ACL entries
>
> Hi Matthieu,
>
> I am still working with the product group on documenting what we have been
> working on (the way GPMC checks and corrects the ACLs).
>
> It's become a little bit more complicated than anticipated but I will keep
> you updated of the progress as soon as I have news.
>
> On the other hand, I have just created a case with your new set of
> observations/questions and someone from my team will contact you shortly to
> follow up about this new case.
>
> Thanks and regards,
>
> Sebastian
>
>
>
> Sebastian Canevari
> Senior Support Escalation Engineer, US-CSS DSC PROTOCOL TEAM
> 7100 N Hwy 161, Irving, TX - 75039
> "Las Colinas - LC2"
> Tel: +1 469 775 7849
> e-mail: [email protected]
>
>
> -----Original Message-----
> From: Bill Wesse
> Sent: Monday, February 01, 2010 7:20 AM
> To: Matthieu Patou
> Cc: Sebastian Canevari; [email protected]; [email protected]
> Subject: RE: Status: SRX091112600382 [MS-GPOL] - OI and CI flags on every ACL
> entries
>
> Good morning again. Sebastian will be back in the office today; I have just
> reassigned this case back to him.
>
> Sebastian - Matthieu has replied to my email from last Thursday with ACL/SDDL
> considerations that look to be a new case. I was unfortunately taken ill last
> Friday, and was not able to respond.
>
> Regards,
> Bill Wesse
> MCSE, MCTS / Senior Escalation Engineer, US-CSS DSC PROTOCOL TEAM
> 8055 Microsoft Way
> Charlotte, NC 28273
> Email: [email protected]
> Tel: +1(980) 776-8200
> Cell: +1(704) 661-5438
> Fax: +1(704) 665-9606
>
>
> -----Original Message-----
> From: Matthieu Patou [mailto:[email protected]]
> Sent: Friday, January 29, 2010 6:05 PM
> To: Bill Wesse
> Cc: Sebastian Canevari; [email protected]; [email protected]
> Subject: Re: Status: SRX091112600382 [MS-GPOL] - OI and CI flags on every ACL
> entries
>
> On 28/01/2010 19:54, Bill Wesse wrote:
>> Good day Matthieu. Please note that my colleague Sebastian is out of the
>> office for the next few days. In the interim, I will be your contact. Thanks
>> in advance for your patience!
>>
>> I have reviewed the case, and want to make sure I address any open
>> questions. My current read indicates we haven't answered the below question.
>> Could you confirm this is the case, and advise me of any other open
>> questions you have?
>>
>> And last but not least question, it seems that GPMC wants to have OI and CI
>> flags on every ACL entries; is it due to the presence of the
>> "SDDL_AUTO_INHERITED">control in the SDDL?
>>
> Well I'm not sure of this because I remember an email from Hongwei that told
> me that they were set because it was coded like that ...
>
> But in fact I would like to come back to you about NT ACLs (but maybe it
> might be filled in another case let me know if you want to do so).
> Lately I discovered that subinacl is able du dump NT ACLs in SDDL format.
> I checked and it seems that the dump is ok (at least the owner is ok, the
> different granted users/groups are ok also).
> So for instance a w2k3 server acting as a DC I have :
> c:\WINDOWS\SYSVOL\sysvol\samba.net\Policies\{6AC1786C-016F-11D2-945F-0
> 0C04fB984F9}
> /sddl=O:BAG:SYD:PARAI(A;;0x1200a9;;;AU)(A;OICIIO;GXGR;;;AU)(A;;0x1200a9;;;SO)(A;
> OICIIO;GXGR;;;SO)(A;;FA;;;BA)(A;OICIIO;GA;;;BA)(A;;FA;;;SY)(A;OICIIO;GA;;;SY)(A;
> ;FA;;;BA)(A;OICIIO;GA;;;CO)
>
> It was obtained from:
> subinacl.exe /file
> c:\WINDOWS\SYSVOL\sysvol\samba.net\Policies\{6AC1786C-016F-11D2-945F-0
> 0C04fB984F9} /display=sddl
>
> But if dump the ACL of the object
>
> CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=Samba,DC=net
>
> O:DAG:DAD:PAI(A;CI;RPWPCCDCLCLORCWOWDSDDTSW;;;DA)(A;CI;RPWPCCDCLCLORCWOWDSDDTSW;;;EA)(A;;RPWPCCDCLCLORCWOWDSDDTSW;;;DA)(A;CIIO;RPWPCCDCLCLORCWOWDSDDTSW;;;CO)(A;CI;RPWPCCDCLCLORCWOWDSDDTSW;;;SY)(A;CI;RPLCLORC;;;AU)(OA;CI;CR;edacfd8f-ffb3-11d1-b41d-00a0c968f939;;AU)(A;CI;RPLCLORC;;;ED)S:AI(OU;CIIDSA;WPWD;;f30e3bc2-9ff0-11d1-b603-0000f80367c1;WD)(OU;CIIOIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CIIOIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)
>
>
> So even if we remove the SACL and apply the transformation rules proposed
> before there is a huge difference between the file DS ACL and the associated
> file ACL (owner/group is different, BA is used in file ACL when DA is used in
> DS ACL). So it is seems that the logic is not ok (although it makes gpmc
> happy).
>
> Can you explain this ? Can you take from your side dump of a fresh
> w2k3r2 dc (or w2k8/w2k8r2) and look for the ACL on files/dir associated with
> GPO and with the GPO objects as well ?
>
> Regards.
> Matthieu.
>
>> Thanks in advance!
>>
>> Regards,
>> Bill Wesse
>> MCSE, MCTS / Senior Escalation Engineer, US-CSS DSC PROTOCOL TEAM
>> 8055 Microsoft Way
>> Charlotte, NC 28273
>> Email: [email protected]
>> Tel: +1(980) 776-8200
>> Cell: +1(704) 661-5438
>> Fax: +1(704) 665-9606
>>
>> From: Matthieu Patou [mailto:[email protected]]
>> Sent: Tuesday, December 22, 2009 3:56 PM
>> To: Hongwei Sun
>> Cc: Sebastian Canevari; [email protected]; [email protected]
>> Subject: Re: FW: [cifs-protocol] Group Policy questions
>>
>> On 23/12/2009 00:47, Hongwei Sun wrote:
>>
>>> Matthieu,
>>>
>>> Your summary is a good recap of what we have done on this topic. I
>>> have one clarification for the point below.
>>>
>>> * All ACE for allowed object are wipped out when
>>> "translating" AD ACL to File ACL
>>>
>>> When translating a ACL for DS object to a ACL for SYSVOL file
>>> object, the ACEs with types of ACCESS_ALLOWED_OBJECT_ACE_TYPE,
>>> ACCESS_DENIED_OBJECT_ACE_TYPE and SYSTEM_AUDIT_OBJECT_ACE_TYPE are not
>>> really deleted from the ACL. Instead, for such a ACE, access mask in
>>> AceHeader is assigned to zero.
>>>
>>>
>> Yeah I meant that when "translating" an AD ACL to a file ACL we do not care
>> about it, for all those ACCESS_ALLOWED_OBJECT_ACE_TYPE in the AD no
>> corresponding ACE in created.
>>
>>
>>
>>> Sebastian will follow up with you on your question regarding
>>> documenting the logic for ACE OI and CI flags.
>>>
>>> Thanks!
>>>
>>> Hongwei
>>>
>>>
>
>
> _______________________________________________
> cifs-protocol mailing list
> [email protected]
> https://lists.samba.org/mailman/listinfo/cifs-protocol
>
cn DirectoryString 1 {E4919F5B-52B9-4C41-A0ED-36CB97E5C1AE}
D:PAI(OA;CI;CR;edacfd8f-ffb3-11d1-b41d-00a0c968f939;;AU)(A;;CCDCLCSWRPWPDTLOSDRCWDWO;;;DA)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;DA)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;EA)(A;CI;LCRPLORC;;;ED)(A;CI;LCRPLORC;;;AU)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;SY)(A;CIIO;CCDCLCSWRPWPDTLOSDRCWDWO;;;CO)
Security Descriptor:
Security Descriptor:SD Revision: 1
SD Control: 0x9c04
SE_DACL_PRESENT
SE_DACL_AUTO_INHERITED
SE_SACL_AUTO_INHERITED
SE_DACL_PROTECTED
SE_SELF_RELATIVE
Owner: TESTFIRSTDC\Domain Admins [S-1-5-21-1230391479-906185276-3449596779-512]
Group: TESTFIRSTDC\Domain Admins [S-1-5-21-1230391479-906185276-3449596779-512]
DACL:
Revision 4
Size: 236 bytes
# Aces: 8
Ace[0]
Ace Type: 0x5 - ACCESS_ALLOWED_OBJECT_ACE_TYPE
Ace Size: 40 bytes
Ace Flags: 0x2
CONTAINER_INHERIT_ACE
Object Ace Mask: 0x00000100
ACTRL_DS_CONTROL_ACCESS
Object Ace Flags: 0x1
ACE_OBJECT_TYPE_PRESENT
Object Ace Type: Apply Group Policy -
edacfd8f-ffb3-11d1-b41d-00a0c968f939
Object Ace Sid: NT AUTHORITY\Authenticated Users [S-1-5-11]
Ace[1]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 36 bytes
Ace Flags: 0x0
Ace Mask: 0x000f00ff
DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_DELETE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_DELETE_TREE
ACTRL_DS_LIST_OBJECT
Ace Sid: TESTFIRSTDC\Domain Admins
[S-1-5-21-1230391479-906185276-3449596779-512]
Ace[2]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 36 bytes
Ace Flags: 0x2
CONTAINER_INHERIT_ACE
Ace Mask: 0x000f00ff
DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_DELETE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_DELETE_TREE
ACTRL_DS_LIST_OBJECT
Ace Sid: TESTFIRSTDC\Domain Admins
[S-1-5-21-1230391479-906185276-3449596779-512]
Ace[3]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 36 bytes
Ace Flags: 0x2
CONTAINER_INHERIT_ACE
Ace Mask: 0x000f00ff
DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_DELETE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_DELETE_TREE
ACTRL_DS_LIST_OBJECT
Ace Sid: TESTFIRSTDC\Enterprise Admins
[S-1-5-21-1230391479-906185276-3449596779-519]
Ace[4]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 20 bytes
Ace Flags: 0x2
CONTAINER_INHERIT_ACE
Ace Mask: 0x00020094
READ_CONTROL
ACTRL_DS_LIST
ACTRL_DS_READ_PROP
ACTRL_DS_LIST_OBJECT
Ace Sid: NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS [S-1-5-9]
Ace[5]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 20 bytes
Ace Flags: 0x2
CONTAINER_INHERIT_ACE
Ace Mask: 0x00020094
READ_CONTROL
ACTRL_DS_LIST
ACTRL_DS_READ_PROP
ACTRL_DS_LIST_OBJECT
Ace Sid: NT AUTHORITY\Authenticated Users [S-1-5-11]
Ace[6]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 20 bytes
Ace Flags: 0x2
CONTAINER_INHERIT_ACE
Ace Mask: 0x000f00ff
DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_DELETE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_DELETE_TREE
ACTRL_DS_LIST_OBJECT
Ace Sid: NT AUTHORITY\SYSTEM [S-1-5-18]
Ace[7]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 20 bytes
Ace Flags: 0xa
CONTAINER_INHERIT_ACE
INHERIT_ONLY_ACE
Ace Mask: 0x000f00ff
DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_DELETE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_DELETE_TREE
ACTRL_DS_LIST_OBJECT
Ace Sid: CREATOR OWNER [S-1-3-0]
SACL not present
Security for
"CN={E4919F5B-52B9-4C41-A0ED-36CB97E5C1AE},CN=Policies,CN=System,DC=TestFirstDC,DC=prototest,DC=comD:PAI(A;;CCLCSWRPWPLORCWDWO;;;DA)(A;CIIO;CCDCLCSWRPWPDTLOSDRCWDWO;;;DA)(A;;CCLCSWRPWPLORCWDWO;;;EA)(A;CIIO;CCDCLCSWRPWPDTLOSDRCWDWO;;;EA)(A;;CCLCSWRPWPLORCWDWO;;;DA)(A;CIIO;CCDCLCSWRPWPDTLOSDRCWDWO;;;CO)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;SY)(A;CI;LCRPLORC;;;AU)(OA;CI;CR;edacfd8f-ffb3-11d1-b41d-00a0c968f939;;AU)(A;CI;LCRPLORC;;;ED)
Security for
"CN={6AC1786C-016F-11D2-945F-00C04fB984F9},CN=Policies,CN=System,DC=TestFirstDC,DC=prototest,DC=com"
-----------
Security Descriptor:
Security Descriptor:SD Revision: 1
SD Control: 0x9c04
SE_DACL_PRESENT
SE_DACL_AUTO_INHERITED
SE_SACL_AUTO_INHERITED
SE_DACL_PROTECTED
SE_SELF_RELATIVE
Owner: TESTFIRSTDC\Domain Admins [S-1-5-21-1230391479-906185276-3449596779-512]
Group: TESTFIRSTDC\Domain Admins [S-1-5-21-1230391479-906185276-3449596779-512]
DACL:
Revision 4
Size: 308 bytes
# Aces: 10
Ace[0]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 36 bytes
Ace Flags: 0x0
Ace Mask: 0x000e00bd
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_LIST_OBJECT
Ace Sid: TESTFIRSTDC\Domain Admins
[S-1-5-21-1230391479-906185276-3449596779-512]
Ace[1]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 36 bytes
Ace Flags: 0xa
CONTAINER_INHERIT_ACE
INHERIT_ONLY_ACE
Ace Mask: 0x000f00ff
DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_DELETE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_DELETE_TREE
ACTRL_DS_LIST_OBJECT
Ace Sid: TESTFIRSTDC\Domain Admins
[S-1-5-21-1230391479-906185276-3449596779-512]
Ace[2]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 36 bytes
Ace Flags: 0x0
Ace Mask: 0x000e00bd
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_LIST_OBJECT
Ace Sid: TESTFIRSTDC\Enterprise Admins
[S-1-5-21-1230391479-906185276-3449596779-519]
Ace[3]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 36 bytes
Ace Flags: 0xa
CONTAINER_INHERIT_ACE
INHERIT_ONLY_ACE
Ace Mask: 0x000f00ff
DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_DELETE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_DELETE_TREE
ACTRL_DS_LIST_OBJECT
Ace Sid: TESTFIRSTDC\Enterprise Admins
[S-1-5-21-1230391479-906185276-3449596779-519]
Ace[4]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 36 bytes
Ace Flags: 0x0
Ace Mask: 0x000e00bd
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_LIST_OBJECT
Ace Sid: TESTFIRSTDC\Domain Admins
[S-1-5-21-1230391479-906185276-3449596779-512]
Ace[5]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 20 bytes
Ace Flags: 0xa
CONTAINER_INHERIT_ACE
INHERIT_ONLY_ACE
Ace Mask: 0x000f00ff
DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_DELETE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_DELETE_TREE
ACTRL_DS_LIST_OBJECT
Ace Sid: CREATOR OWNER [S-1-3-0]
Ace[6]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 20 bytes
Ace Flags: 0x2
CONTAINER_INHERIT_ACE
Ace Mask: 0x000f00ff
DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACTRL_DS_CREATE_CHILD
ACTRL_DS_DELETE_CHILD
ACTRL_DS_LIST
ACTRL_DS_SELF
ACTRL_DS_READ_PROP
ACTRL_DS_WRITE_PROP
ACTRL_DS_DELETE_TREE
ACTRL_DS_LIST_OBJECT
Ace Sid: NT AUTHORITY\SYSTEM [S-1-5-18]
Ace[7]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 20 bytes
Ace Flags: 0x2
CONTAINER_INHERIT_ACE
Ace Mask: 0x00020094
READ_CONTROL
ACTRL_DS_LIST
ACTRL_DS_READ_PROP
ACTRL_DS_LIST_OBJECT
Ace Sid: NT AUTHORITY\Authenticated Users [S-1-5-11]
Ace[8]
Ace Type: 0x5 - ACCESS_ALLOWED_OBJECT_ACE_TYPE
Ace Size: 40 bytes
Ace Flags: 0x2
CONTAINER_INHERIT_ACE
Object Ace Mask: 0x00000100
ACTRL_DS_CONTROL_ACCESS
Object Ace Flags: 0x1
ACE_OBJECT_TYPE_PRESENT
Object Ace Type: Apply Group Policy -
edacfd8f-ffb3-11d1-b41d-00a0c968f939
Object Ace Sid: NT AUTHORITY\Authenticated Users [S-1-5-11]
Ace[9]
Ace Type: 0x0 - ACCESS_ALLOWED_ACE_TYPE
Ace Size: 20 bytes
Ace Flags: 0x2
CONTAINER_INHERIT_ACE
Ace Mask: 0x00020094
READ_CONTROL
ACTRL_DS_LIST
ACTRL_DS_READ_PROP
ACTRL_DS_LIST_OBJECT
Ace Sid: NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS [S-1-5-9]
ÿþ+ F i l e
C : \ W i n d o w s \ S Y S V O L \ d o m a i n \ P o l i c i e s \ { E 4 9 1 9 F 5 B - 5 2 B 9 - 4 C 4 1 - A 0 E D - 3 6 C B 9 7 E 5 C 1 A E }
/ s d d l = O : D A G : D A D : P A R A I ( A ; O I C I ; F A ; ; ; D A ) ( A ; O I C I ; F A ; ; ; D A ) ( A ; O I C I ; F A ; ; ; E A ) ( A ; O I C I ; 0 x 1 2 0 0 a 9 ; ; ; E D ) ( A ; O I C I ; 0 x 1 2 0 0 a 9 ; ; ; A U ) ( A ; O I C I ; F A ; ; ; S Y ) ( A ; O I C I I O ; F A ; ; ; C O )
= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
+ F i l e
C : \ W i n d o w s \ S Y S V O L \ d o m a i n \ P o l i c i e s \ { E 4 9 1 9 F 5 B - 5 2 B 9 - 4 C 4 1 - A 0 E D - 3 6 C B 9 7 E 5 C 1 A E }
= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
/ c o n t r o l = 0 x 1 c 0 0
S E _ D A C L _ A U T O _ I N H E R I T E D - 0 x 0 4 0 0
S E _ D A C L _ P R O T E C T E D - 0 x 1 0 0 0
S E _ S A C L _ A U T O _ I N H E R I T E D - 0 x 0 8 0 0
/ o w n e r = t e s t f i r s t d c \ d o m a i n
a d m i n s
/ p r i m a r y g r o u p = t e s t f i r s t d c \ d o m a i n
a d m i n s
/ a u d i t a c e c o u n t = 0
/ p e r m . a c e c o u n t = 7
/ p a c e = t e s t f i r s t d c \ d o m a i n a d m i n s
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
C O N T A I N E R _ I N H E R I T _ A C E - 0 x 2
O B J E C T _ I N H E R I T _ A C E - 0 x 1
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - W r i t e
- E x e c u t e - D e l e t e - C h a n g e P e r m i s s i o n s
- T a k e O w n e r s h i p
D e t a i l e d A c c e s s F l a g s :
F I L E _ R E A D _ D A T A - 0 x 1
F I L E _ W R I T E _ D A T A - 0 x 2
F I L E _ A P P E N D _ D A T A - 0 x 4
F I L E _ R E A D _ E A - 0 x 8
F I L E _ W R I T E _ E A - 0 x 1 0
F I L E _ E X E C U T E - 0 x 2 0
F I L E _ D E L E T E _ C H I L D - 0 x 4 0
F I L E _ R E A D _ A T T R I B U T E S - 0 x 8 0
F I L E _ W R I T E _ A T T R I B U T E S - 0 x 1 0 0
D E L E T E - 0 x 1 0 0 0 0
R E A D _ C O N T R O L - 0 x 2 0 0 0 0
W R I T E _ D A C - 0 x 4 0 0 0 0
W R I T E _ O W N E R - 0 x 8 0 0 0 0
S Y N C H R O N I Z E - 0 x 1 0 0 0 0 0
/ p a c e = t e s t f i r s t d c \ d o m a i n a d m i n s
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
C O N T A I N E R _ I N H E R I T _ A C E - 0 x 2
O B J E C T _ I N H E R I T _ A C E - 0 x 1
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - W r i t e
- E x e c u t e - D e l e t e - C h a n g e P e r m i s s i o n s
- T a k e O w n e r s h i p
D e t a i l e d A c c e s s F l a g s :
F I L E _ R E A D _ D A T A - 0 x 1
F I L E _ W R I T E _ D A T A - 0 x 2
F I L E _ A P P E N D _ D A T A - 0 x 4
F I L E _ R E A D _ E A - 0 x 8
F I L E _ W R I T E _ E A - 0 x 1 0
F I L E _ E X E C U T E - 0 x 2 0
F I L E _ D E L E T E _ C H I L D - 0 x 4 0
F I L E _ R E A D _ A T T R I B U T E S - 0 x 8 0
F I L E _ W R I T E _ A T T R I B U T E S - 0 x 1 0 0
D E L E T E - 0 x 1 0 0 0 0
R E A D _ C O N T R O L - 0 x 2 0 0 0 0
W R I T E _ D A C - 0 x 4 0 0 0 0
W R I T E _ O W N E R - 0 x 8 0 0 0 0
S Y N C H R O N I Z E - 0 x 1 0 0 0 0 0
/ p a c e = t e s t f i r s t d c \ e n t e r p r i s e a d m i n s
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
C O N T A I N E R _ I N H E R I T _ A C E - 0 x 2
O B J E C T _ I N H E R I T _ A C E - 0 x 1
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - W r i t e
- E x e c u t e - D e l e t e - C h a n g e P e r m i s s i o n s
- T a k e O w n e r s h i p
D e t a i l e d A c c e s s F l a g s :
F I L E _ R E A D _ D A T A - 0 x 1
F I L E _ W R I T E _ D A T A - 0 x 2
F I L E _ A P P E N D _ D A T A - 0 x 4
F I L E _ R E A D _ E A - 0 x 8
F I L E _ W R I T E _ E A - 0 x 1 0
F I L E _ E X E C U T E - 0 x 2 0
F I L E _ D E L E T E _ C H I L D - 0 x 4 0
F I L E _ R E A D _ A T T R I B U T E S - 0 x 8 0
F I L E _ W R I T E _ A T T R I B U T E S - 0 x 1 0 0
D E L E T E - 0 x 1 0 0 0 0
R E A D _ C O N T R O L - 0 x 2 0 0 0 0
W R I T E _ D A C - 0 x 4 0 0 0 0
W R I T E _ O W N E R - 0 x 8 0 0 0 0
S Y N C H R O N I Z E - 0 x 1 0 0 0 0 0
/ p a c e = e n t e r p r i s e d o m a i n c o n t r o l l e r s
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
C O N T A I N E R _ I N H E R I T _ A C E - 0 x 2
O B J E C T _ I N H E R I T _ A C E - 0 x 1
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - E x e c u t e
D e t a i l e d A c c e s s F l a g s :
F I L E _ R E A D _ D A T A - 0 x 1
F I L E _ R E A D _ E A - 0 x 8
F I L E _ E X E C U T E - 0 x 2 0
F I L E _ R E A D _ A T T R I B U T E S - 0 x 8 0
R E A D _ C O N T R O L - 0 x 2 0 0 0 0
S Y N C H R O N I Z E - 0 x 1 0 0 0 0 0
/ p a c e = a u t h e n t i c a t e d u s e r s
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
C O N T A I N E R _ I N H E R I T _ A C E - 0 x 2
O B J E C T _ I N H E R I T _ A C E - 0 x 1
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - E x e c u t e
D e t a i l e d A c c e s s F l a g s :
F I L E _ R E A D _ D A T A - 0 x 1
F I L E _ R E A D _ E A - 0 x 8
F I L E _ E X E C U T E - 0 x 2 0
F I L E _ R E A D _ A T T R I B U T E S - 0 x 8 0
R E A D _ C O N T R O L - 0 x 2 0 0 0 0
S Y N C H R O N I Z E - 0 x 1 0 0 0 0 0
/ p a c e = s y s t e m
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
C O N T A I N E R _ I N H E R I T _ A C E - 0 x 2
O B J E C T _ I N H E R I T _ A C E - 0 x 1
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - W r i t e
- E x e c u t e - D e l e t e - C h a n g e P e r m i s s i o n s
- T a k e O w n e r s h i p
D e t a i l e d A c c e s s F l a g s :
F I L E _ R E A D _ D A T A - 0 x 1
F I L E _ W R I T E _ D A T A - 0 x 2
F I L E _ A P P E N D _ D A T A - 0 x 4
F I L E _ R E A D _ E A - 0 x 8
F I L E _ W R I T E _ E A - 0 x 1 0
F I L E _ E X E C U T E - 0 x 2 0
F I L E _ D E L E T E _ C H I L D - 0 x 4 0
F I L E _ R E A D _ A T T R I B U T E S - 0 x 8 0
F I L E _ W R I T E _ A T T R I B U T E S - 0 x 1 0 0
D E L E T E - 0 x 1 0 0 0 0
R E A D _ C O N T R O L - 0 x 2 0 0 0 0
W R I T E _ D A C - 0 x 4 0 0 0 0
W R I T E _ O W N E R - 0 x 8 0 0 0 0
S Y N C H R O N I Z E - 0 x 1 0 0 0 0 0
/ p a c e = c r e a t o r o w n e r
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
C O N T A I N E R _ I N H E R I T _ A C E - 0 x 2
I N H E R I T _ O N L Y _ A C E - 0 x 8
O B J E C T _ I N H E R I T _ A C E - 0 x 1
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - W r i t e
- E x e c u t e - D e l e t e - C h a n g e P e r m i s s i o n s
- T a k e O w n e r s h i p
D e t a i l e d A c c e s s F l a g s :
F I L E _ R E A D _ D A T A - 0 x 1
F I L E _ W R I T E _ D A T A - 0 x 2
F I L E _ A P P E N D _ D A T A - 0 x 4
F I L E _ R E A D _ E A - 0 x 8
F I L E _ W R I T E _ E A - 0 x 1 0
F I L E _ E X E C U T E - 0 x 2 0
F I L E _ D E L E T E _ C H I L D - 0 x 4 0
F I L E _ R E A D _ A T T R I B U T E S - 0 x 8 0
F I L E _ W R I T E _ A T T R I B U T E S - 0 x 1 0 0
D E L E T E - 0 x 1 0 0 0 0
R E A D _ C O N T R O L - 0 x 2 0 0 0 0
W R I T E _ D A C - 0 x 4 0 0 0 0
W R I T E _ O W N E R - 0 x 8 0 0 0 0
S Y N C H R O N I Z E - 0 x 1 0 0 0 0 0
ÿþ
+ F i l e
C : \ W i n d o w s \ S Y S V O L \ d o m a i n \ P o l i c i e s \ { 6 A C 1 7 8 6 C - 0 1 6 F - 1 1 D 2 - 9 4 5 F - 0 0 C 0 4 f B 9 8 4 F 9 }
/ s d d l = O : B A G : S Y D : P A R A I ( A ; ; 0 x 1 2 0 0 a 9 ; ; ; A U ) ( A ; O I C I I O ; G X G R ; ; ; A U ) ( A ; ; 0 x 1 2 0 0 a 9 ; ; ; S O ) ( A ; O I C I I O ; G X G R ; ; ; S O ) ( A ; ; 0 x 1 e 0 1 b f ; ; ; B A ) ( A ; O I C I I O ; G A ; ; ; B A ) ( A ; ; F A ; ; ; S Y ) ( A ; O I C I I O ; G A ; ; ; S Y ) ( A ; ; 0 x 1 e 0 1 b f ; ; ; B A ) ( A ; O I C I I O ; G A ; ; ; C O ) S : A R A I ( A U ; S A ; S D ; ; ; W D )
= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
+ F i l e
C : \ W i n d o w s \ S Y S V O L \ d o m a i n \ P o l i c i e s \ { 6 A C 1 7 8 6 C - 0 1 6 F - 1 1 D 2 - 9 4 5 F - 0 0 C 0 4 f B 9 8 4 F 9 }
= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
/ c o n t r o l = 0 x 1 c 0 0
S E _ D A C L _ A U T O _ I N H E R I T E D - 0 x 0 4 0 0
S E _ D A C L _ P R O T E C T E D - 0 x 1 0 0 0
S E _ S A C L _ A U T O _ I N H E R I T E D - 0 x 0 8 0 0
/ o w n e r
= b u i l t i n \ a d m i n i s t r a t o r s
/ p r i m a r y g r o u p = s y s t e m
/ a u d i t a c e c o u n t = 1
/ a a c e = e v e r y o n e
S Y S T E M _ A U D I T _ A C E _ T Y P E - 0 x 2
S U C C E S S F U L _ A C C E S S _ A C E _ F L A G - 0 x 4 0
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - D e l e t e
D e t a i l e d A c c e s s F l a g s :
D E L E T E - 0 x 1 0 0 0 0
/ p e r m . a c e c o u n t = 1 0
/ p a c e = a u t h e n t i c a t e d u s e r s
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - E x e c u t e
D e t a i l e d A c c e s s F l a g s :
F I L E _ R E A D _ D A T A - 0 x 1
F I L E _ R E A D _ E A - 0 x 8
F I L E _ E X E C U T E - 0 x 2 0
F I L E _ R E A D _ A T T R I B U T E S - 0 x 8 0
R E A D _ C O N T R O L - 0 x 2 0 0 0 0
S Y N C H R O N I Z E - 0 x 1 0 0 0 0 0
/ p a c e = a u t h e n t i c a t e d u s e r s
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
C O N T A I N E R _ I N H E R I T _ A C E - 0 x 2
I N H E R I T _ O N L Y _ A C E - 0 x 8
O B J E C T _ I N H E R I T _ A C E - 0 x 1
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - E x e c u t e
D e t a i l e d A c c e s s F l a g s :
G E N E R I C _ R E A D - 0 x 8 0 0 0 0 0 0 0
G E N E R I C _ E X E C U T E - 0 x 2 0 0 0 0 0 0 0
/ p a c e = b u i l t i n \ s e r v e r o p e r a t o r s
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - E x e c u t e
D e t a i l e d A c c e s s F l a g s :
F I L E _ R E A D _ D A T A - 0 x 1
F I L E _ R E A D _ E A - 0 x 8
F I L E _ E X E C U T E - 0 x 2 0
F I L E _ R E A D _ A T T R I B U T E S - 0 x 8 0
R E A D _ C O N T R O L - 0 x 2 0 0 0 0
S Y N C H R O N I Z E - 0 x 1 0 0 0 0 0
/ p a c e = b u i l t i n \ s e r v e r o p e r a t o r s
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
C O N T A I N E R _ I N H E R I T _ A C E - 0 x 2
I N H E R I T _ O N L Y _ A C E - 0 x 8
O B J E C T _ I N H E R I T _ A C E - 0 x 1
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - E x e c u t e
D e t a i l e d A c c e s s F l a g s :
G E N E R I C _ R E A D - 0 x 8 0 0 0 0 0 0 0
G E N E R I C _ E X E C U T E - 0 x 2 0 0 0 0 0 0 0
/ p a c e = b u i l t i n \ a d m i n i s t r a t o r s
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - W r i t e
- E x e c u t e - C h a n g e P e r m i s s i o n s - T a k e
O w n e r s h i p
D e t a i l e d A c c e s s F l a g s :
F I L E _ R E A D _ D A T A - 0 x 1
F I L E _ W R I T E _ D A T A - 0 x 2
F I L E _ A P P E N D _ D A T A - 0 x 4
F I L E _ R E A D _ E A - 0 x 8
F I L E _ W R I T E _ E A - 0 x 1 0
F I L E _ E X E C U T E - 0 x 2 0
F I L E _ R E A D _ A T T R I B U T E S - 0 x 8 0
F I L E _ W R I T E _ A T T R I B U T E S - 0 x 1 0 0
R E A D _ C O N T R O L - 0 x 2 0 0 0 0
W R I T E _ D A C - 0 x 4 0 0 0 0
W R I T E _ O W N E R - 0 x 8 0 0 0 0
S Y N C H R O N I Z E - 0 x 1 0 0 0 0 0
/ p a c e = b u i l t i n \ a d m i n i s t r a t o r s
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
C O N T A I N E R _ I N H E R I T _ A C E - 0 x 2
I N H E R I T _ O N L Y _ A C E - 0 x 8
O B J E C T _ I N H E R I T _ A C E - 0 x 1
T y p e o f a c c e s s :
S p e c i a l a c c c e s s :
D e t a i l e d A c c e s s F l a g s :
/ p a c e = s y s t e m
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - W r i t e
- E x e c u t e - D e l e t e - C h a n g e P e r m i s s i o n s
- T a k e O w n e r s h i p
D e t a i l e d A c c e s s F l a g s :
F I L E _ R E A D _ D A T A - 0 x 1
F I L E _ W R I T E _ D A T A - 0 x 2
F I L E _ A P P E N D _ D A T A - 0 x 4
F I L E _ R E A D _ E A - 0 x 8
F I L E _ W R I T E _ E A - 0 x 1 0
F I L E _ E X E C U T E - 0 x 2 0
F I L E _ D E L E T E _ C H I L D - 0 x 4 0
F I L E _ R E A D _ A T T R I B U T E S - 0 x 8 0
F I L E _ W R I T E _ A T T R I B U T E S - 0 x 1 0 0
D E L E T E - 0 x 1 0 0 0 0
R E A D _ C O N T R O L - 0 x 2 0 0 0 0
W R I T E _ D A C - 0 x 4 0 0 0 0
W R I T E _ O W N E R - 0 x 8 0 0 0 0
S Y N C H R O N I Z E - 0 x 1 0 0 0 0 0
/ p a c e = s y s t e m
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
C O N T A I N E R _ I N H E R I T _ A C E - 0 x 2
I N H E R I T _ O N L Y _ A C E - 0 x 8
O B J E C T _ I N H E R I T _ A C E - 0 x 1
T y p e o f a c c e s s :
S p e c i a l a c c c e s s :
D e t a i l e d A c c e s s F l a g s :
/ p a c e = b u i l t i n \ a d m i n i s t r a t o r s
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
T y p e o f a c c e s s :
S p e c i a l a c c c e s s : - R e a d - W r i t e
- E x e c u t e - C h a n g e P e r m i s s i o n s - T a k e
O w n e r s h i p
D e t a i l e d A c c e s s F l a g s :
F I L E _ R E A D _ D A T A - 0 x 1
F I L E _ W R I T E _ D A T A - 0 x 2
F I L E _ A P P E N D _ D A T A - 0 x 4
F I L E _ R E A D _ E A - 0 x 8
F I L E _ W R I T E _ E A - 0 x 1 0
F I L E _ E X E C U T E - 0 x 2 0
F I L E _ R E A D _ A T T R I B U T E S - 0 x 8 0
F I L E _ W R I T E _ A T T R I B U T E S - 0 x 1 0 0
R E A D _ C O N T R O L - 0 x 2 0 0 0 0
W R I T E _ D A C - 0 x 4 0 0 0 0
W R I T E _ O W N E R - 0 x 8 0 0 0 0
S Y N C H R O N I Z E - 0 x 1 0 0 0 0 0
/ p a c e = c r e a t o r o w n e r
A C C E S S _ A L L O W E D _ A C E _ T Y P E - 0 x 0
C O N T A I N E R _ I N H E R I T _ A C E - 0 x 2
I N H E R I T _ O N L Y _ A C E - 0 x 8
O B J E C T _ I N H E R I T _ A C E - 0 x 1
T y p e o f a c c e s s :
S p e c i a l a c c c e s s :
D e t a i l e d A c c e s s F l a g s :
_______________________________________________
cifs-protocol mailing list
[email protected]
https://lists.samba.org/mailman/listinfo/cifs-protocol
