permissions policy checker

[=?Utf-8?B?YXVsZGg=?=]

i'm looking for best methods to add to a C# program i want to build to do
checking on permissions for files/folders and what rights in local pc policy.

if i have a give user id i want to traverse the Windows rights/permission
for that account. then see what rights under the local machine policy are
enabled for the user.

i'm working on finding issues where certain user accounts though they appear
correct do not seem to have specific access. where another account with
similar configuration works.

so the program will go through Windows rights and permissions in hopes of
finding discrepancies with rights.

what i'm looking for is what .Net Framework reference are needed, what
windows api (wmi...) and i guess assistance in getting started.

thanks.


so the program will go through Windows rights and permissions in hopes of
finding discrepencies with rights.

[Larry Smith]

Re: permissions policy checker

i'm looking for best methods to add to a C# program i want to build to do

checking on permissions for files/folders and what rights in local pc
policy.
>
if i have a give user id i want to traverse the Windows rights/permission
for that account. then see what rights under the local machine policy are
enabled for the user.
>
i'm working on finding issues where certain user accounts though they
appear
correct do not seem to have specific access. where another account with
similar configuration works.
>
so the program will go through Windows rights and permissions in hopes of
finding discrepancies with rights.
>
what i'm looking for is what .Net Framework reference are needed, what
windows api (wmi...) and i guess assistance in getting started.
>
thanks.
>
>
so the program will go through Windows rights and permissions in hopes of
finding discrepencies with rights.

I'm not sure what .NET offers in this area nor am I completely clear on your
own needs. It takes a solid amount of security knowledge to wade into this
area but perhaps this is what you're after:

http://msdn2.microsoft.com/en-us/library/aa374815.aspx

[=?Utf-8?B?YXVsZGg=?=]

Re: permissions policy checker

thanks Larry for your input.
is appears to be a piece of the pie.

in C# i want to build a program which will present me the equivalent of the
Windows permissions dialog which shows the detail permissions of the
folder/file.

I need to build a permissions/rights checker and i’m not finding data in one
place explaining what is needed. So i can not start.


"Larry Smith" wrote:

i'm looking for best methods to add to a C# program i want to build to do
checking on permissions for files/folders and what rights in local pc
policy.

if i have a give user id i want to traverse the Windows rights/permission
for that account. then see what rights under the local machine policy are
enabled for the user.

i'm working on finding issues where certain user accounts though they
appear
correct do not seem to have specific access. where another account with
similar configuration works.

so the program will go through Windows rights and permissions in hopes of
finding discrepancies with rights.

what i'm looking for is what .Net Framework reference are needed, what
windows api (wmi...) and i guess assistance in getting started.

thanks.


so the program will go through Windows rights and permissions in hopes of
finding discrepencies with rights.

>
I'm not sure what .NET offers in this area nor am I completely clear on your
own needs. It takes a solid amount of security knowledge to wade into this
area but perhaps this is what you're after:
>

http://msdn2.microsoft.com/en-us/library/aa374815.aspx

>
>
>

[Larry Smith]

Re: permissions policy checker

thanks Larry for your input.

is appears to be a piece of the pie.
>
in C# i want to build a program which will present me the equivalent of
the
Windows permissions dialog which shows the detail permissions of the
folder/file.
>
I need to build a permissions/rights checker and i'm not finding data in
one
place explaining what is needed. So i can not start.

If you're simply trying to reproduce the security property page seen when
you look at a file's properties in Windows Explorer then check out
"CreateSecurity Page()" and "EditSecurity() " in the WinAPI. It appears this
is what you're after though I've never had the need to use it myself. Keep
in mind that native Windows security is different than .NET security but it
appears you're after the former. Of course you'll have to P/Invoke to these
functions if you want to do it in C# assuming there's no simpler way to do
it in.NET (I doubt it but look first). Note that this is a deep subject in
any case so I'd recommend some heavy reading before you proceed.
"Programmin g Windows Security" by Keith Brown is a great book to start with.
It's getting old now so it may be hard to find (I'm not sure) but it's still
very relevant (explaining Windows security in excellent detail). At the very
least cross-reference your Google searches with his name. Good luck.

[=?Utf-8?B?YXVsZGg=?=]

Re: permissions policy checker

thanks Larry,
will do.
i don't need the GUI since i need to check the fields. i was hoping for full
C# and .NET but it never that easy. thanks for the reference manual this is
what i really need.

"Larry Smith" wrote:

thanks Larry for your input.
is appears to be a piece of the pie.

in C# i want to build a program which will present me the equivalent of
the
Windows permissions dialog which shows the detail permissions of the
folder/file.

I need to build a permissions/rights checker and i'm not finding data in
one
place explaining what is needed. So i can not start.

>
If you're simply trying to reproduce the security property page seen when
you look at a file's properties in Windows Explorer then check out
"CreateSecurity Page()" and "EditSecurity() " in the WinAPI. It appears this
is what you're after though I've never had the need to use it myself. Keep
in mind that native Windows security is different than .NET security but it
appears you're after the former. Of course you'll have to P/Invoke to these
functions if you want to do it in C# assuming there's no simpler way to do
it in.NET (I doubt it but look first). Note that this is a deep subject in
any case so I'd recommend some heavy reading before you proceed.
"Programmin g Windows Security" by Keith Brown is a great book to start with.
It's getting old now so it may be hard to find (I'm not sure) but it's still
very relevant (explaining Windows security in excellent detail). At the very
least cross-reference your Google searches with his name. Good luck.
>
>
>

[=?Utf-8?B?YXVsZGg=?=]

Re: permissions policy checker

Larry i thought i share this, Keith has a new book.
"The .NET Developer's Guide to Windows Security"

"auldh" wrote:

thanks Larry,
will do.
i don't need the GUI since i need to check the fields. i was hoping for full
C# and .NET but it never that easy. thanks for the reference manual this is
what i really need.
>
"Larry Smith" wrote:
>

thanks Larry for your input.
is appears to be a piece of the pie.
>
in C# i want to build a program which will present me the equivalent of
the
Windows permissions dialog which shows the detail permissions of the
folder/file.
>
I need to build a permissions/rights checker and i'm not finding data in
one
place explaining what is needed. So i can not start.

If you're simply trying to reproduce the security property page seen when
you look at a file's properties in Windows Explorer then check out
"CreateSecurity Page()" and "EditSecurity() " in the WinAPI. It appears this
is what you're after though I've never had the need to use it myself. Keep
in mind that native Windows security is different than .NET security but it
appears you're after the former. Of course you'll have to P/Invoke to these
functions if you want to do it in C# assuming there's no simpler way to do
it in.NET (I doubt it but look first). Note that this is a deep subject in
any case so I'd recommend some heavy reading before you proceed.
"Programmin g Windows Security" by Keith Brown is a great book to start with.
It's getting old now so it may be hard to find (I'm not sure) but it's still
very relevant (explaining Windows security in excellent detail). At the very
least cross-reference your Google searches with his name. Good luck.