API Reference
Class
AuditPermissions
Convenience facade for SACL (audit) operations on File, Registry, and Service. Requires SeSecurityPrivilege. Remote registry supported for HKLM/HKU/HKCR/HKCC.
Inheritance
- Object
- AuditPermissions
Methods
public static String GetFileSacl(String path) #Returns:
StringGets the file SACL as SDDL. Returns null when privilege is missing.
Parameters
- path System.String
Examples
var sddl = AuditPermissions.GetFileSacl(@"C:\\Data\\log.txt");
public static String GetRegistrySacl(String computer, String keyPath) #Returns:
StringGets registry key SACL as SDDL (local or remote HKLM/HKU/HKCR/HKCC).
Parameters
- computer System.String
- keyPath System.String
Examples
var s = AuditPermissions.GetRegistrySacl(Environment.MachineName, "HKLM\\SOFTWARE");
public static String GetServiceSacl(String computer, String serviceName) #Returns:
StringGets a service SACL as SDDL. Requires SeSecurityPrivilege.
Parameters
- computer System.String
- serviceName System.String
Examples
var s = AuditPermissions.GetServiceSacl(null, "EventLog");
public static Boolean SetFileSacl(String path, String sddl) #Returns:
BooleanSets the file SACL from SDDL. Requires SeSecurityPrivilege.
Parameters
- path System.String
- sddl System.String
Examples
AuditPermissions.SetFileSacl(@"C:\\Data\\log.txt", "S:(AU;SAFA;GA;;;WD)");
public static Boolean SetRegistrySacl(String computer, String keyPath, String sddl) #Returns:
BooleanSets registry key SACL from SDDL (local or remote HKLM/HKU/HKCR/HKCC).
Parameters
- computer System.String
- keyPath System.String
- sddl System.String
Examples
AuditPermissions.SetRegistrySacl("SRV1", "HKLM\\SOFTWARE", "S:(AU;SAFA;GA;;;WD)");
public static Boolean SetServiceSacl(String computer, String serviceName, String sddl) #Returns:
BooleanSets a service SACL from SDDL. Requires SeSecurityPrivilege.
Parameters
- computer System.String
- serviceName System.String
- sddl System.String
Examples
AuditPermissions.SetServiceSacl(null, "EventLog", "S:(AU;SAFA;GA;;;WD)");
Inherited Methods
public override Boolean Equals(Object obj) #Returns:
BooleanInherited from Object
Parameters
- obj Object