Re: SetUserObjectSecurity gives error ERROR_NOT_ENOUGH_QUOTA

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Jochen Kalmbach (nospam-Jochen.Kalmbach_at_holzma.de)
Date: 10/23/04 

Date: Sat, 23 Oct 2004 14:07:46 -0700

Hi user1976,

> If you cannot track when the process dies, there are several
> procedures that you can use to remove any unnecessary ACEs. You can
> enumerate processes, read the Logon Security Identifier (SID) or User
> SID from the process token, and compare one of them to the ACEs stored
> in the DACL for the window station and desktop objects.

I just added to the very good example of Dumpacl at
http://win32.mvps.org/security/dumpacl.html
the ability to dump Winsta-ACLs:
Maybe Felix will update his site to relfect the changes...
In the meanwhile you can download it here:

http://blog.kalmbachnet.de/files/dumpacl.zip

To dump an ACL of an windows-station (winsta0) do the following:

dumpacl WINSTA:winsta0 

-- 
Greetings
  Jochen
 
   My blog about Win32 and .NET
   http://blog.kalmbachnet.de/

Relevant Pages

  • Re: SetUserObjectSecurity gives error ERROR_NOT_ENOUGH_QUOTA
    ... > procedures that you can use to remove any unnecessary ACEs. ... > enumerate processes, read the Logon Security Identifier (SID) or User ...
    (microsoft.public.win32.programmer.kernel)
  • Re: SetUserObjectSecurity gives error ERROR_NOT_ENOUGH_QUOTA
    ... > procedures that you can use to remove any unnecessary ACEs. ... > enumerate processes, read the Logon Security Identifier (SID) or User ...
    (microsoft.public.win2000.developer)
  • Re: Question about SID
    ... Note that if you enumerate processes based on the user sid then you will get ... all process for that user even from other logon sessions (if for some reason ... You can enumerate the processes based on the logon sid to ...
    (microsoft.public.platformsdk.security)