Source code of Windows XP (NT5)
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
|
|
@echo off
echo This batch file will modify some ACL permissions on the currentecho user's profile directories, allowing the RESTRICTED user to accessecho some parts of the profile, while denying access to others.echo This operation requires that the path shown below be on an NTFSecho file system.echo.echo "%UserProfile%"echo.echo You can abort this script now, or...pause
rem Grant RESTRICTED read-only to everythingcacls.exe "%UserProfile%" /e /t /g restricted:r
rem Revoke RESTRICTED access to these private areas.cacls.exe "%UserProfile%\application data\identities" /e /t /r restrictedcacls.exe "%UserProfile%\application data\microsoft\crypto" /e /t /r restrictedcacls.exe "%UserProfile%\application data\microsoft\protect" /e /t /r restrictedcacls.exe "%UserProfile%\local settings\application data\identities" /e /t /r restrictedcacls.exe "%UserProfile%\local settings\application data\microsoft\crypto" /e /t /r restrictedcacls.exe "%UserProfile%\local settings\application data\microsoft\protect" /e /t /r restricted
rem Even worse, deny RESTRICTED to these private areas.cacls.exe "%UserProfile%\application data\identities" /e /t /d restrictedcacls.exe "%UserProfile%\application data\microsoft\crypto" /e /t /d restrictedcacls.exe "%UserProfile%\application data\microsoft\protect" /e /t /d restrictedcacls.exe "%UserProfile%\local settings\application data\identities" /e /t /d restrictedcacls.exe "%UserProfile%\local settings\application data\microsoft\crypto" /e /t /d restrictedcacls.exe "%UserProfile%\local settings\application data\microsoft\protect" /e /t /d restricted
rem Grant change control to the temporary folders.cacls.exe "%UserProfile%\local settings\temp" /e /t /g restricted:ccacls.exe "%UserProfile%\local settings\temporary internet files" /e /t /g restricted:c
rem Revoke and deny access to our documents, too.rem Causes access denied on common dlg file open though.rem cacls.exe "%UserProfile%\My Documents" /e /t /r restrictedrem cacls.exe "%UserProfile%\My Documents" /e /t /d restricted
rem Revoke and deny access to cookies.cacls.exe "%UserProfile%\Cookies" /e /t /r restrictedcacls.exe "%UserProfile%\Cookies" /e /t /d restricted
pause
|
