Yesterday I’ve done a small change in a deployment script that was supposed to “only” allow write permissions to a registry key values. I’ve had little luck with regini.exe and cacls.exe, so I’ve quickly found a free replacement – setacl.exe. If you need to quickly do something with it – forget the docs – go straight to examples.
However, one thing got me even more – when dealing with windows security trying to support different languages, you’d better know about this (list): Well-known security identifiers in Windows operating systems.
You don’t want to rely on yourself remembering how administrator username is spelled in Spanish or French (or even care about that), do you?