none
SDDL in wecutil.exe example

    질문

  • Looking here: http://msdn.microsoft.com/en-us/library/windows/desktop/bb870973(v=vs.85).aspx

    There is an example of an XML file for configuration settings:

    ...
        <LogFile>ForwardedEvents</LogFile>
        <AllowedSourceNonDomainComputers></AllowedSourceNonDomainComputers>
        <AllowedSourceDomainComputers>O:NSG:NSD:(A;;GA;;;DC)(A;;GA;;;NS)</AllowedSourceDomainComputers>
    </Subscription>

    It looks like I need to specify a SDDL string for <AllowedSourceDomainComputers>. 

    First there are somevalues in the example SDDL string I do not understand. I was not able to find out what NSG: or NSD:mean.

    Also I would like to edit the xml file so AllowedSourceDomainComputers would be the "domain controllers" group. Not sure how to do that.


    • 편집됨 red888 2013년 7월 19일 금요일 오후 5:50
    2013년 7월 19일 금요일 오후 5:48

답변

모든 응답

  • If I just replace the "DC" in the SDDL string with "DD" would work to give domain controller this access instead of all domain computers?

    Even if that is all I need to do I'm still curious about what NSG: and NSD: is.

    2013년 7월 19일 금요일 오후 6:00
  • Hi,

    Thanks for posting in Microsoft TechNet forums.

    Regarding this issue, I suggest we seek help in the MSDN forums. There you can get more effective suggestion by other experts who familiar with this topic. Your understanding is appreciated.

    http://social.msdn.microsoft.com/Forums/en-US/home

    Regards

    Kevin

    • 답변으로 표시됨 red888 2013년 7월 23일 화요일 오후 2:25
    2013년 7월 23일 화요일 오전 7:00
  • Thanks, I'll give it a shot.
    2013년 7월 23일 화요일 오후 2:24