Jump to content

Export Regsitry ACL?


Shadowpp

Recommended Posts

I am in need of a method to export XP registry ACL values. I have tried to acomplish this using a variety of registry tools such as reg.exe, regdmp.exe, etc...

but no joy.

I know I can import ACL permissions using regini but I want to be able to see the original settings before I overwrite them.

Any advice would be very appreciated.

Link to comment
Share on other sites


SubInAcl is a somewhat complex tool... but this seems to show the PACE's for a regkey:

subinacl /output="c:\documents and settings\%username%\Desktop\out.txt" /keyreg HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder

Simply replace the regkey use above, for the one you want to check the values for.

You would use /subkeyreg if you wanted to find out the permissions on a subkey.

The out put is something similar to this:

=======================================================================================
+KeyReg HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder
=======================================================================================
/control=0x0
/owner             =mjollnir\neophyte
/primary group     =mjollnir\none
/audit ace count   =0
/perm. ace count   =3
/pace =builtin\administrators  ACCESS_ALLOWED_ACE_TYPE-0x0
CONTAINER_INHERIT_ACE-0x2      
   Key and SubKey - Type of Access:
Read
   Detailed Access Flags :
KEY_QUERY_VALUE-0x1        KEY_ENUMERATE_SUB_KEYS-0x8 KEY_NOTIFY-0x10            
READ_CONTROL-0x20000      
/pace =everyone  ACCESS_ALLOWED_ACE_TYPE-0x0
CONTAINER_INHERIT_ACE-0x2      
   Key and SubKey - Type of Access:
Read
   Detailed Access Flags :
KEY_QUERY_VALUE-0x1        KEY_ENUMERATE_SUB_KEYS-0x8 KEY_NOTIFY-0x10            
READ_CONTROL-0x20000      
/pace =system  ACCESS_ALLOWED_ACE_TYPE-0x0
CONTAINER_INHERIT_ACE-0x2      
   Key and SubKey - Type of Access:
Full Control
   Detailed Access Flags :
KEY_QUERY_VALUE-0x1        KEY_SET_VALUE-0x2          KEY_CREATE_SUB_KEY-0x4    
KEY_ENUMERATE_SUB_KEYS-0x8 KEY_NOTIFY-0x10            KEY_CREATE_LINK-0x20       DELETE-0x10000            
READ_CONTROL-0x20000       WRITE_DAC-0x40000          WRITE_OWNER-0x80000        

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...