Tag Archives | Permission

SetACL Studio - HKLM-Software - verbose

Permissions Windows Does Not Show You

Sometimes it is good not to know the truth, but as an administrator you better know what is going on! Most IT pros know that Explorer lies a lot (on a German system C:\Users magically becomes C:\Benutzer), but few are aware that Windows’ permission handling dialog ACL Editor also tends to “pretty up” things. Example […]

Continue Reading · 0

Temporary User Profiles

This article is part of Helge’s Profile Toolkit, a set of posts explaining the knowledge and tools required to tame Windows user profiles. Nobody wants a temporary profile. So why do I get one? Here are the most common reasons for Windows to only issue a profile that is deleted at logoff instead of the […]

Continue Reading · 3

How to Map Generic Rights to Standard and Specific Rights

There are two equivalent ways trustees can be assigned a specific set of permissions on Windows: via generic rights and via a combination of standard and specific rights. Generic rights are identical for all object types. There are only four of them: GENERIC_READ (0x80000000) GENERIC_WRITE (0x40000000) GENERIC_EXECUTE (0x20000000) GENERIC_ALL (0x10000000) As the name implies, generic […]

Continue Reading · 1

What is the SYNCHRONIZE File Access Right?

When dealing with Windows NTFS file system permissions, one quickly encounters the SYNCHRONIZE access right, the purpose of which may not be obvious. SYNCHRONIZE belongs to the standard access rights, just like DELETE, READ_CONTROL, WRITE_DAC and WRITE_OWNER. Here is the definition of SYNCHRONIZE from MSDN: The SYNCHRONIZE access right is defined within the standard access […]

Continue Reading · 0