Profile permissions ...

[Simo Sorce]

On Wed, 2002-10-30 at 07:45, Richard Sharpe wrote:
> Hi,
> 
> In looking at NTUSER.DAT, it seems that the permissions associated with 
> some of the SIDs are:
> 
>   0x000f003f
> 
> Hmmm, here is one of the entries:
> 
>    0x0014 003f 000f 0101 0000 0000 0005 0012 0000
> 
> Which seems to be:
> 
>   ACCESS Denied, No Propogate Inherit, All Access, S-1-5-4608
> 
> Does this seem reasonable?

not at all

from include/rpc_secdesc.h that I lately updated:

#define SEC_RIGHTS_FULL_CONTROL         0x000f003f

so it is full control!

Richard, remember special rights means different things depending on
which object they are applyed on, see rpc_secdesc.h for more information
on this bits for various object types.

Simo.

-- 
Simo Sorce - simo.sorce at xsec.it
Xsec s.r.l.
via Durando 10 Ed. G - 20158 - Milano
tel. +39 02 2399 7130 - fax: +39 02 700 442 399
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20021030/2089a95f/attachment.bin