1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

OT: nice tool

Discussion in 'Support' started by vefatica, Nov 24, 2016.

  1. vefatica

    Joined:
    May 20, 2008
    Messages:
    7,883
    Likes Received:
    29
    I recently discovered SUBINACL.EXE.
    [https://www.microsoft.com/en-us/download/details.aspx?id=23510]
    Among other things it lets you get control of individual things. For example, I gave myself (unelevated) control over the image acquisition service (stisvc) like this.
    Code:
    subinacl /service stisvc /grant=zz\vefatica=TOP
    It works on files, services, shares, processes, and several other object types. Here's its basic usage:

    Code:
    Usage :
         SubInAcl [/option...] /object_type object_name [[/action[=parameter]...]
    and its help for "/grant".
    Code:
    /GRANT
    ------
    /grant=[DomainName\]User[=Access]
    
         will add a Permission Ace for the user.
         if Access is not specified, the Full Control access will be granted.
    
         File:
           F : Full Control
           C : Change
           R : Read
           P : Change Permissions
           O : Take Ownership
           X : eXecute
           E : Read eXecute
           W : Write
           D : Delete
    
         ClusterShare:
           F : Full Control
           R : Read
           C : Change
    
         Printer:
           F : Full Control
           M : Manage Documents
           P : Print
    
         KeyReg:
           F : Full Control
           R : Read
           A : ReAd Control
           Q : Query Value
           S : Set Value
           C : Create SubKey
           E : Enumerate Subkeys
           Y : NotifY
           L : Create Link
           D : Delete
           W : Write DAC
           O : Write Owner
    
         Service:
           F : Full Control
           R : Generic Read
           W : Generic Write
           X : Generic eXecute
           L : Read controL
           Q : Query Service Configuration
           S : Query Service Status
           E : Enumerate Dependent Services
           C : Service Change Configuration
    
           T : Start Service
           O : Stop Service
           P : Pause/Continue Service
           I : Interrogate Service
           U : Service User-Defined Control Commands
    
         Share:
           F : Full Control
           R : Read
           C : Change
    
         Metabase:
           F : Full Control
           R : Read - MD_ACR_READ
           W : Write - MD_ACR_WRITE
           I : Restricted Write - MD_ACR_RESTRICTED_WRITE
           U : Unsecure props read - MD_ACR_UNSECURE_PROPS_READ
           E : Enum keys- MD_ACR_ENUM_KEYS
           D : write Dac- MD_ACR_WRITE_DAC
    
         Process:
           F : Full Control
           R : Read
           W : Write
           X : eXecute
    
         SamObject:
           F : Full Control
           W : Write
           R : Read
           X : Execute
     
  2. fishman@panix.com

    Joined:
    Feb 21, 2009
    Messages:
    83
    Likes Received:
    0
    When I try to install it the Windows Installer sends me a Nastygram that the installation failed because my system has not been modified. What does that mean?

    Harvey
     

Share This Page