TestimoX

API Reference

Class

AuditPermissions

Namespace ComputerX.Acl
Assembly ComputerX
Modifiers static

Convenience facade for SACL (audit) operations on File, Registry, and Service. Requires SeSecurityPrivilege. Remote registry supported for HKLM/HKU/HKCR/HKCC.

Inheritance

  • Object
  • AuditPermissions

Methods

public static String GetFileSacl(String path) #
Returns: String

Gets the file SACL as SDDL. Returns null when privilege is missing.

Parameters

path System.String requiredposition: 0

Examples


var sddl = AuditPermissions.GetFileSacl(@"C:\\Data\\log.txt");
        
public static String GetRegistrySacl(String computer, String keyPath) #
Returns: String

Gets registry key SACL as SDDL (local or remote HKLM/HKU/HKCR/HKCC).

Parameters

computer System.String requiredposition: 0
keyPath System.String requiredposition: 1

Examples


var s = AuditPermissions.GetRegistrySacl(Environment.MachineName, "HKLM\\SOFTWARE");
        
public static String GetServiceSacl(String computer, String serviceName) #
Returns: String

Gets a service SACL as SDDL. Requires SeSecurityPrivilege.

Parameters

computer System.String requiredposition: 0
serviceName System.String requiredposition: 1

Examples


var s = AuditPermissions.GetServiceSacl(null, "EventLog");
        
public static Boolean SetFileSacl(String path, String sddl) #
Returns: Boolean

Sets the file SACL from SDDL. Requires SeSecurityPrivilege.

Parameters

path System.String requiredposition: 0
sddl System.String requiredposition: 1

Examples


AuditPermissions.SetFileSacl(@"C:\\Data\\log.txt", "S:(AU;SAFA;GA;;;WD)");
        
public static Boolean SetRegistrySacl(String computer, String keyPath, String sddl) #
Returns: Boolean

Sets registry key SACL from SDDL (local or remote HKLM/HKU/HKCR/HKCC).

Parameters

computer System.String requiredposition: 0
keyPath System.String requiredposition: 1
sddl System.String requiredposition: 2

Examples


AuditPermissions.SetRegistrySacl("SRV1", "HKLM\\SOFTWARE", "S:(AU;SAFA;GA;;;WD)");
        
public static Boolean SetServiceSacl(String computer, String serviceName, String sddl) #
Returns: Boolean

Sets a service SACL from SDDL. Requires SeSecurityPrivilege.

Parameters

computer System.String requiredposition: 0
serviceName System.String requiredposition: 1
sddl System.String requiredposition: 2

Examples


AuditPermissions.SetServiceSacl(null, "EventLog", "S:(AU;SAFA;GA;;;WD)");