SubInAcl Topics | Previous | Next

SubInAcl Editing Features

SubInAcl allows you to modify each part of a a security descriptor:

• owner
  See /owner=SID or /setowner=SID
• primary group
  see /setprimarygroup=GroupSID
• system ACL (SubInAcl name = Audit ACL) with access control entries or ACEs (SubInAcl name = AAce = Audit ACE)
  see /audit /aace=xxx
• discretionary ACL (SubInAcl name = Perm ACL ) with Access Control Entries (SubInAcl name= PAce = Perm ACE)
  see /perm /pace=xxx, /revoke=SID, /grant=SID=Access, and /deny=SID