请输入您要查询的百科知识:

 

词条 SetACL
释义

  1. Features

  2. Usage

  3. Short history

  4. References

{{Use dmy dates|date=December 2012}}{{Infobox_Software
| name = SetACL
| logo =
| screenshot =
| caption =
| developer = Helge Klein
| latest_release_version = 3.0.6
| latest_release_date = 7 September 2012
| operating_system = Microsoft Windows
| genre = Utility software
| license = Freeware
| website = helgeklein.com/setacl
}}

SetACL is a freeware utility for manipulating security descriptors on Microsoft Windows.[1] It used to be available under the GNU Lesser General Public License (LGPL) as a command-line utility and as an ActiveX component, but changed to a freeware license in version 3.0.0.0.

Features

This list of features is taken from the product's web page.[2]

  • Supports the following object types on Windows 2000 and later
    • NTFS files and directories
    • registry keys
    • printers
    • services
    • network shares
    • WMI objects
  • Manage permissions on local or remote systems in domains or workgroups.
  • Set multiple permissions for multiple users or groups in a single command.
  • Control how permissions are inherited.
  • List, backup and restore permissions.
  • All operations work on a single object or recursively on a directory or registry tree.
  • Set the owner to any user or group.
  • Unicode support.
  • Remove, replace or copy a user or group from an ACL.
  • Fast performance due to time consuming steps such as recursing a large file system are performed only once.
  • Filter out object names not to be processed.

Usage

To set 'change' permissions on the directory 'C:\\angela' for user 'brian' in domain 'dom1':

 SetACL.exe -on "C:\\angela" -ot file -actn ace            -ace "n:dom1\\brian;p:change"

Remove write and change permission sets from Desktop, replace with 'read and execute' permissions:

 SetACL.exe -on "\\\\mycomputer\\C$\\Documents and Settings\\username\\Desktop" -ot file             -actn ace -ace "n:mycomputer\\username;p:write,change;m:revoke"            -ace "n:mycomputer\\username;p:read_ex"

An example of its use from AutoIt can be found here

Short history

  • March 2001 SetACL program 0.x development begins
  • December 2002 SetACL program 2.x development begins
  • April 2003 2.0 beta 1 released
  • July 2003 2.0 final released
  • September 2003 2.0.1.0 released - Remove, replace or copy all Access Control Entries (ACEs) belonging to users or groups of a specified domain.
  • January 2004 2.0.2 released - ActiveX support. can be used from any language that supports COM including AutoIt, Visual Basic, Perl, VBScript.
  • May 2008 2.0.3 released - 64-bit support
  • August 2010 2.1 released - Improved permission listing

References

1. ^SetACL Documentation
2. ^SetACL Windows permission management

2 : Operating system security|Windows commands

随便看

 

开放百科全书收录14589846条英语、德语、日语等多语种百科知识,基本涵盖了大多数领域的百科知识,是一部内容自由、开放的电子版国际百科全书。

 

Copyright © 2023 OENC.NET All Rights Reserved
京ICP备2021023879号 更新时间:2024/9/20 9:46:40