Re: Why do some folders/registry keys have 2 permissions instead of 1?

w2k_user_at_nospam.com
Date: 01/31/05 

Date: Mon, 31 Jan 2005 12:12:54 -0500

Thanks, Roger. I'll have to assume Windows XP does the same thing.

If Microsoft or someone else could just write a command line utility to
display all the ACEs the same way that Explorer and Regedt32 do, then that'd
be a perfect solution.

On Mon, 31 Jan 2005 08:25:40 -0700, "Roger Abell" <mvpNOSpam@asu.edu> wrote:

>It gets even worse if you have storage that was once on an NT4
>system that underwent upgrade.
>
>AFAIK there is no overall answer to you, but rather just the
>fact that the ACEs are adjusted by a variety of routines, not
>all of which did things the same way. About the only common
>thing is that what gets shown in Explorer's ACL editor is
>digested such that when there are multiple ACEs that can
>be shown with a generic ACE they are shown with one, even
>though the actual SD has this represented not with a generic.
>
>I once attempted something similar to what you are trying,
>and eventually gave up due to the unending maze of complex
>variations, especially for inherited ACEs.

Relevant Pages