Froodle
05-13-2004, 03:35 AM
Hi,
I need to delegate the security of the creation of File shares on a Windows 2000 server to users who are not administrators or power users.
There is a registry key that is mentioned in a microsoft security document - http://www.microsoft.com/technet/security/community/security_faq.mspx
At the end of that article talks about a registry key "SrvsvcShareFileInfo" under HKLM\SYSTEM\CurrentControlSet\Services\Lanmanserve r\DefaultSecurity.
This is a Binary key, and appears to be a Security Descriptor.
What I need are tools to decode and encode this binary value to encompass a new Domain group.
I need to delegate the security of the creation of File shares on a Windows 2000 server to users who are not administrators or power users.
There is a registry key that is mentioned in a microsoft security document - http://www.microsoft.com/technet/security/community/security_faq.mspx
At the end of that article talks about a registry key "SrvsvcShareFileInfo" under HKLM\SYSTEM\CurrentControlSet\Services\Lanmanserve r\DefaultSecurity.
This is a Binary key, and appears to be a Security Descriptor.
What I need are tools to decode and encode this binary value to encompass a new Domain group.