That and http://technet.microsoft.com/en-us/library/cc783530(v=ws.10).aspx was just enough to fill in the missing blanks.
All good now, Thanks! jlc From: [email protected] [mailto:[email protected]] On Behalf Of Michael B. Smith Sent: Monday, December 30, 2013 4:22 PM To: [email protected] Subject: RE: [NTSysADM] Access Masks There is a script on my blog about dumping access control lists. I'm pretty sure it's so old that it is in vbscript. I'm walking around a mall while the teenage son watches a movie with his gal, so it'll be a couple of hours until I can find the article for you, but you should be able to search the blog and find it easily. Sent from my Windows Phone ________________________________ From: Joseph L. Casale<mailto:[email protected]> Sent: 12/30/2013 5:40 PM To: '[email protected]'<mailto:[email protected]> Subject: [NTSysADM] Access Masks Hey guys, Does anyone know the composition of the Modify and Read & Execute groups for access masks? For example, Full Control is mapped to (STANDARD_RIGHTS_REQUIRED |SYNCHRONIZE | 0x1FF). I’ve been hunting MSDN and haven’t found the exact composition. Thanks, jlc

