Yes, this is right. I see 0x000f003f all the time when processing ACL lists. It's the "all" mask.
-----Original Message-----
From: Simo Sorce [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 30, 2002 2:41 AM
To: Samba Technical
Subject: Re: Profile permissions ...
On Wed, 2002-10-30 at 07:45, Richard Sharpe wrote:
> Hi,
>
> In looking at NTUSER.DAT, it seems that the permissions associated with
> some of the SIDs are:
>
> 0x000f003f
>
> Hmmm, here is one of the entries:
>
> 0x0014 003f 000f 0101 0000 0000 0005 0012 0000
>
> Which seems to be:
>
> ACCESS Denied, No Propogate Inherit, All Access, S-1-5-4608
>
> Does this seem reasonable?
not at all
from include/rpc_secdesc.h that I lately updated:
#define SEC_RIGHTS_FULL_CONTROL 0x000f003f
so it is full control!
Richard, remember special rights means different things depending on
which object they are applyed on, see rpc_secdesc.h for more information
on this bits for various object types.
Simo.
--
Simo Sorce - [EMAIL PROTECTED]
Xsec s.r.l.
via Durando 10 Ed. G - 20158 - Milano
tel. +39 02 2399 7130 - fax: +39 02 700 442 399
