DefaultSecurity

[mm]

the
document "http://www.microsoft.com/windowsserver2003/commun
ity/centers/security/security_faq.asp" refers to changing
the default security descriptors for new shares, printers
etc. Is there any documentation concerning deciphering
the various default REG_BINARY values
(SrvsvcSharePrintInfo, SrvsvcShareFileinfo etc.)

The FAQ also mentions a tool that Microsoft is working on,
which I am unable to find also.

 

[Nick Finco [MSFT]]

They are binary self-relative security descriptors stored in those registry
values. You can create one using
ConvertStringSecurityDescriptorToSecurityDescriptor or by
MakeSelfRelativeSD.

N