Is there a single utility allowing to view/modify DACL of all the securable objects in windows?
There are different kinds of securable objects in windows. To name a few:
- files
- registry keys
- certificate keys
More are listed on Securable Objects on MSDN (although that page misses the certificate keys).
I am wondering if there is a single utility (command line or GUI - never mind) that lets one examine/modify the permissions on each and every kind of securable objects in windows.
I know there is a utility for files (icacl开发者_StackOverflow中文版s
).
And then, there is a different utility for registry (regini
).
And then there are probably other utilities.
For some objects I failed to find any way except coding the respective Win32 API, for instance try changing the permissions of a service certificate keys on windows 2003/XP (for windows 2008/7 one can use certutil
).
So, what about having a single tool (command line or GUI) to work with them all? Is there such a thing out there?
精彩评论