Free programs to view/edit NTFS permissions

Discussion in 'other security issues & news' started by MrBrian, Feb 26, 2010.

Thread Status:
Not open for further replies.
  1. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    I've been looking around for alternatives to Windows' built-in tools for managing NTFS permissions. Here are two that I've tried and will keep:

    a) ACLView - can change permissions; already been mentioned in other threads by Kees1958 and Sully.

    Screenshot

    Do NOT try to download this program from any site that merely links to what once was the author's site. If you ignore my warning, you may get an eyeful instead of the program! Instead, download file ACLViewSetup.exe (which installs v1.4.104.17) from http://ftp.uom.gr/pub/noc/FREEWARE/Networking/Net Monitoring-Information-Protocol Analyzers/. According to Bit9, this is (very likely) the exact same file as is (or was) hosted at reputable download sites such as Softpedia. Its MD5 hash is B71C66C2B0D84E084145E19B5B4386A5.

    b) BPACLer - can view but not change permissions.

    Does anybody know any other similar free programs, excluding command-line programs such as icacls?
     
  2. Brummelchen

    Brummelchen Registered Member

    Joined:
    Jan 3, 2009
    Posts:
    1,732
    to a) alternate download here (german site)
    http://www.virenschutz.info/virenschutz-downloads-details-14.html
    hash approved! -> b71c66c2b0d84e084145e19b5b4386a5|ACLViewSetup.exe
     
  3. Sully

    Sully Registered Member

    Joined:
    Dec 23, 2005
    Posts:
    3,719
    I downloaded the file when the site was still up. I will check against my hash and see if it is the same.

    Sul.
     
  4. Sully

    Sully Registered Member

    Joined:
    Dec 23, 2005
    Posts:
    3,719
    Here are some archived links to understanding SDDL. I learned a lot from these sites.

    http://blogs.dirteam.com/blogs/jorge/archive/2008/03/26/parsing-sddl-strings.aspx

    http://networkadminkb.com/Shared Documents/Understanding the SDDL permissions in the ACE_String.aspx

    http://networkadminkb.com/kb/Knowledge Base/Windows2003/How to Read a SDDL String.aspx

    Warning - some of this stuff can drive you mad. This is the best documentation I found, on par or better than msdn. And still with this you will note that there are many mysteries left why M$ used an SDDL the way it did, and how you can recreate it for other uses. Sometimes I swear they have specially coded stuff for specific items.

    Have fun. I will certainly post back here if I ever find another GUI for this stuff, but I doubt it.

    Sul.
     
Loading...
Thread Status:
Not open for further replies.