O:\>sc sdshow messenger

D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)

...OK then. I'm sorry I asked. o_O

I thought Unix was pretty cryptic for using names like "cp" and "rm" and 
"rn". But this takes the biscuit. (Especially given that "sc" is an 
obscure command that you will almost never, ever need to use, while cp 
and rm are things you might well use every single day...)

Apparently the stream of alphanumeric gibberish is Microsoft's Security 
Descriptor Definition Language (SDDL). Like most things Microsoft, it 
doesn't appear to be properly documented. (Or rather, the documentation 
only makes sense if you already know how it works.)

Who would have thought the trivial task of giving somebody the right to 
restart a service could be this hard?

Post a reply to this message