SubInAcl Topics | SubInAcl Syntax | Previous | Next
Values:
SubInAcl can work with various kinds of objects. Most objects support enumeration with the "*" (wildcard) character. Actions are valid for all objects.
Examples of object_name for /file:
*.obj
c:\temp\*.obj
\\servername\share\*.exe
Note that SubInAcl is not supported on Dfs volumes.
/subdirectories
manipulates files in specified directory and all subdirectories.
Examples of object_name for /subdirectories:
c:\temp\*.obj - works with all .obj files in the \temp directory.
c:\temp\test - works with all test files under the \temp directory.
c:\temp\test\*.* - works with all files under \temp\test.
/onlyfile
opens a file without using the FindFilexxx mechanism.
Can be used to access named pipes or mailslot, for example:
\\.\pipe\pipename
/share
accesses a network file share.
Example of object_name for /share:
\\server\share
/clustershare
access a cluster file share resource.
Examples of object_name for /clustershare:
\\clustername\FileShare_Resource_Name
\\clustername\s*
/keyreg
manipulates registry keys.
Examples of object_name for /keyreg:
HKEY_CURRENT_USER\Software
HKEY_CURRENT_USER\Software\*Version
\\Srv\HKEY_LOCAL_MACHINE\KeyPath
/subkeyreg
manipulates registry keys and subkeys.
Examples of object_name for /subkeyreg:
\\Srv\HKEY_LOCAL_MACHINE\KeyPath
/service
manipulates services.
Examples of object_name for /service:
\\ServerName\Messenger
Messenger
/printer
manipulates printers, using any valid printer name as object_name.
/kernelobject
accesses a named kernel object.
Can be used to view mutexes, sections, and event objects
/metabase
gives access to the AdminACL metabase property of the Internet Information Services metabase.
Note that this property can be used only with the following metabase paths:
\LM\MSFTPSVC
\LM\MSFTPSVC/n
\LM\W3SVC
This object does not support enumeration.
Example:
subinacl /metabase \\ServerName\LM\W3SVC /grant=administrator=F