0x40000000 TRUSTED_SET_CONTROLLERS | TRUSTED_SET_POSIX | READ_CONTROL 0x00020014 0x20000000 TRUSTED_QUERY_CONTROLLERS | TRUSTED_QUERY_POSIX | READ_CONTROL 0x0002000A 0x10000000 TRUSTED_QUERY_DOMAIN_NAME | TRUSTED_QUERY_CONTROLLERS | TRUSTED_SET_CONTROLLERS | TRUSTED_QUERY_POSIX | TRUSTED_SET_POSIX | TRUSTED_SET_AUTH | TRUSTED_QUERY_AUTH | DELETE | READ_CONTROL | WRITE_DAC | WRITE_OWNER 0x000F007F ACCESS_MASK for Policy Objects The following flags apply to policy objects. Meaning 0x00000000 No access. POLICY_VIEW_LOCAL_INFORMATION Access to view local 0x00000001 information. POLICY_VIEW_AUDIT_INFORMATION Access to view audit 0x00000002 information. POLICY_GET_PRIVATE_INFORMATION Access to view private 0x00000004 information. POLICY_TRUST_ADMIN Access to administer 0x00000008 trust relationships. POLICY_CREATE_ACCOUNT Access to create 0x00000010 account objects. POLICY_CREATE_SECRET Access to create secret 0x00000020 objects.
0x40000000 TRUSTED_SET_CONTROLLERS | TRUSTED_SET_POSIX | READ_CONTROL 0x00020014 0x20000000 TRUSTED_QUERY_CONTROLLERS | TRUSTED_QUERY_POSIX | READ_CONTROL 0x0002000A 0x10000000 TRUSTED_QUERY_DOMAIN_NAME | TRUSTED_QUERY_CONTROLLERS | TRUSTED_SET_CONTROLLERS | TRUSTED_QUERY_POSIX | TRUSTED_SET_POSIX | TRUSTED_SET_AUTH | TRUSTED_QUERY_AUTH | DELETE | READ_CONTROL | WRITE_DAC | WRITE_OWNER 0x000F007F ACCESS_MASK for Policy Objects The following flags apply to policy objects. Meaning 0x00000000 No access. POLICY_VIEW_LOCAL_INFORMATION 0x00000001 Access to view local information. POLICY_VIEW_AUDIT_INFORMATION 0x00000002 Access to view audit information. POLICY_GET_PRIVATE_INFORMATION 0x00000004 Access to view private information. POLICY_TRUST_ADMIN 0x00000008 Access to administer trust relationships. POLICY_CREATE_ACCOUNT 0x00000010 Access to create account objects. POLICY_CREATE_SECRET 0x00000020 Access to create secret objects.
%5BMS-LSAD%5D-160714.docx