Anonymous Monk has asked for the wisdom of the Perl Monks concerning the following question:

Dear All,

How can I extract security information regarding users and groups permissioning and directory level access directly from the SAM database.

Any Hints will do.

Replies are listed 'Best First'.
Re: Extracting info from the SAM
by Marza (Vicar) on Jun 17, 2002 at 17:57 UTC

    Depends on what you are trying to accomplish; so a little more info would be good.

    The TieRegistry Module is very good for Registry access. Used it heavily for an AVP report and a Device checker.

    Another one that might be of interest is Tim Roths Win32::Perms.

    These two mods might serve your needs....

Re: Extracting info from the SAM
by rob_au (Abbot) on Jun 17, 2002 at 23:54 UTC
    Depending upon how much work you want to do, it may be worthwhile having a look at the Offline NT Password and Registry Editor - This is a Linux book disk image which includes utilities to extract and update information from the Windows NT/2000 SAM database. If you are looking at following the same path for SAM database access and registry editing as what is employed by this utility, make sure that you also look closely at the information regarding NTFS checks following writing, as failure to do so can result in corruption of the file system.

    Also too, this link off the same page may be helpful if you are looking at implementing a solution de novo.