Security functions

All security functions are based on a Microsoft utility called SubInACL.exe from the Windows Resource Kit.

SubInACL.exe can be downloaded here subinacl.msi

CapaInstaller Scripting Library will search for SubInACL.exe in these locations:

1. %Program Files%\Windows Resource Kits\Tools
2. %WinDir%\System32
3. \\<Management Server>\<Share name>\ComputerJobs\<PackageName>\<Version>\Kit

Because registry access is redirected when running 32-bit applications on 64-bit OS and since SubInACL.exe does not support 64-bit registry access the registry functions are based on SetACL.exe. 
SetACL.exe is included with the CapaInstaller Client installation media.

• Security_DenyDirAccess
• Security_DenyFileAccess
• Security_DenyRegAccess
• Security_DenyServiceAccess
• Security_DenyShareAccess
• Security_RevokeDirPermissions
• Security_RevokeFilePermissions
• Security_RevokeRegPermissions
• Security_RevokeServicePermissions
• Security_RevokeSharePermissions
• Security_SetDirPermissions
• Security_SetFilePermissions
• Security_SetRegPermissions
• Security_SetServicePermissions
• Security_SetSharePermissions