ACL / SDs

[Todd Sabin]

"John E. Malmberg" <malmberg at columbia.total-web.net> writes:
> Elrond <Elrond at Wunder-Nett.org> wrote:
> > Off Topic: Does anyone know free nice tools to show and
> > change SDs unter NT? One that can even handle the order
> > would be interesting.
> 
> The SDs changed with Windows NT 4.0 SP4.  The new format is honored by NT
> 4.0 SP4, but the tools for manipulating the new features are only supplied
> with Windows 2000.
> 
> Basically they added the ability to force inheritance of SDs from the parent
> directory.
> 

I'm pretty sure this is not a new feature, per se.  SDs have always
had this ability, AFAIK.  What's new is that they provided an acl
editor which exposes the full complexity of the already existing SDs,
as opposed to the more limited standard acl editor.

> There is supposed to be a tool on the either the NT4.0 SP4 CD-ROM or later,
> and it may be downloadable from the Microsoft site that adds the ability to
> manipulate the settings from the command line or the GUI.
> 

It's part of the Security Configuration Manager (SCM), previously
known as the Security Configuration Editor.


Todd