how to construct a security descriptor.
The simplest way (I know of) is to use ConvertStringSecurityDescriptorToSecurityDescriptor()
You start with a string something like:
O:S-1-5-21-3383984691-152274320-3948966431-1000 D:PAI(A;;FA;;;S-1-5-21-3383984691-152274320-3948966431-1000)(D;;FA;;;W +D)
But that contains a hard-coded SID, and I couldn't find any simple way to get the SID for the current user. (Ought to be simple; but then nothing is in this world!)
Theoretically, you ought to be able to substitute 'CO' (creator/owner) for the explicit SID, but my attempts to have icacls apply (/restore) that to a file I created resulted in it running flat out (25%cpu) forever.
|Replies are listed 'Best First'.|
Re^6: Private temporal files on Windows
by Discipulus (Abbot) on Dec 19, 2014 at 10:53 UTC