Chris Beams’s Blog

Active Directory and more….

Active Directory – Security Descriptor – ace strings in a security descriptor

Posted by chrisbeams on May 10, 2009

  

ace_type;ace_flags;rights;object_guid;inherit_object_guid;account_sid
 all these are explained in the previous posts they dont all have to have data for example:
(A;;RPWPCCDCLCSWRCWDWOGA;;;S-1-0-0)
creates
AceType:       0x00 (ACCESS_ALLOWED_ACE_TYPE)
AceFlags:      0x00
Access Mask:   0x100e003f
                    READ_CONTROL
                    WRITE_DAC
                    WRITE_OWNER
                    GENERIC_ALL
                    Other access rights(0x0000003f)
Ace Sid      : (S-1-0-0)
Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: