Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

How to duplicate ACLs for a hidden /Windows subdirectory

$
0
0

Directed here by the moderator of answers.microsoft.com. Please redirect me as necessary.

I need to duplicate the ACLs from a peer sub-directory of /Windows to another with recursion. 

The target directory is /Windows/Installer which is causing problems for MSI installs - see orig problem below.

I am not a scripting savant and my past experience with Windows ACLs seemed counter intuitive. I confess to being a Uni*-file.  I want to avoid the problem I experienced in the far past of step by step modification of ACLs where one ACL change precludes the ability to make the subsequent changes - order dependence.

I'm willing to use either Cmd or the PowerShell.
If I can figure out how to do it I will modify this post to reference my initial post relating the original problem, but for now it is at:
answers.microsoft.com/en-us/windows/forum/windows_8-performance/installer-fixr-app-fails-on-w8/947e14b7-e1b3-443d-922a-4fcafd8a8c5f

WHAT I'VE TRIED:

I've used Helge Klein's SetAcl as Eirik Hamer recommended in social.technet.microsoft.com/Forums/en-US/w7itproinstall/thread/6782b5f2-a9e9-4224-b3db-252f3fa621dd, but the /Windows/Installer directory is apparently not readable by SetAcl. 

As Administrator =>setacl -on System -ot \windows\Installer -actn list -lst "f:sddl;w:d,s,o,g" -rec cont -bckp \Temp\ACLs.txt

ERROR in command line: Invalid object type specified: \windows\Installer!


=>icacls Installer
Installer NT AUTHORITY\SYSTEM:(OI)(CI)(F)
          Everyone:(OI)(CI)(RX)
          BUILTIN\Administrators:(OI)(CI)(F)

Successfully processed 1 files; Failed processing 0 files


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>