Security functions

All security functions are based on a Microsoft utility called SubInACL.exe from the Windows Resource Kit.

SubInACL.exe can be downloaded from http://www.microsoft.com/en-us/download/details.aspx?id=23510 

CapaInstaller Scripting Library will search for SubInACL.exe in these locations:

1. %Program Files%\Windows Resource Kits\Tools
2. %WinDir%\System32
3. \\<Management Server>\<Share name>\ComputerJobs\<PackageName>\<Version>\Kit

Because registry access is redirected when running 32 bit applications on 64 bit OS and since SubInACL.exe does not support 64 bit registry access the registry functions are based on SetACL.exe. 
SetACL.exe is included with the CapaInstaller Client installation media.

• Security_DenyDirAccess
• Security_DenyFileAccess
• Security_DenyRegAccess
• Security_DenyServiceAccess
• Security_DenyShareAccess
• Security_RevokeDirPermissions
• Security_RevokeFilePermissions
• Security_RevokeRegPermissions
• Security_RevokeServicePermissions
• Security_RevokeSharePermissions
• Security_SetDirPermissions
• Security_SetFilePermissions
• Security_SetRegPermissions
• Security_SetServicePermissions
• Security_SetSharePermissions