2011/08/16 == == eSecurity Analysis Tool (8.35.1 build 3) == 05:20:42 == == 052042.104 Syscob application context: 052042.104 Processor = “Intel(R) Core(TM) i7 CPU Q 740 @ 1.73GHz” 052042.104 Technical = “Family 6 Model 14 Stepping 5 (octal core) Intel 64-bit at 1.733 GHz” 052042.104 Memory = “7.926 Gb Physical (68.11% free), 2.0 Gb Virtual (95.27% free) with 4.0 Kb Pages” 052042.104 Display = “1920x1080x32 at 60.0 Hz” 052042.104 Windows® = “Windows 7 Professional Edition (64-bit) Service Pack 1 (Build 7601)” 052042.104 Domain = “BASILISK” 052042.104 HostName = “BASILISK” 052042.104 UserName = “Administrator” 052042.104 WindowsPath = “C:\Windows\” 052042.105 Export-It application context: 052042.105 DatabaseRoot = “S:\ExportIt\” 052042.105 PlatformRoot = “L:\ExportIt\” 052042.105 Tier class registrations: 052042.105 Software is registered. 052042.105 Database is registered. 052042.105 Platform is registered. 052042.105 * UserSeat is NOT registered! 052042.105 * Registration of indicated tiers is needed! 052042.105 * Application context has no seat! 052042.105 Export-It Plus application context: 052042.105 DatabaseRoot = “S:\Exportic\” 052042.105 PlatformRoot = “L:\Exportic\” 052042.105 Tier class registrations: 052042.105 Software is registered. 052042.105 Database is registered. 052042.105 Platform is registered. 052042.105 * UserSeat is NOT registered! 052042.105 * Registration of indicated tiers is needed! 052042.105 * Application context has no seat! 052042.105 Two [2] applications are registered. 052042.105 Options set by command parameters: 052042.105 all (i.e. full security context) 052042.105 7 options in effect. 052042.105 Security analysis performed in silent mode. 052042.105 Computer security context: 052042.106 Logon is “Administrators” 052042.106 UserName is “Administrator” 052042.106 HostName is “BASILISK” 052042.106 LUID[0x000003E7] is token origin 052042.106 LUID[0x014F58D2] is token source with name “User32” 052042.106 Security token information: 052042.106 LUID[0x0731673F] is TokenID: 052042.106 LUID[0x014F58DA] is AuthenticationID 052042.106 LUID[0x0731AC45] is the ModifiedID 052042.106 Expiration time is [infinite] 052042.106 Token type is Primary 052042.106 Impersonation level is Anonymous 052042.106 Memory allocated is 1024 bytes 052042.106 Memory available is 916 bytes 052042.106 Token contains 13 supplemental SIDs 052042.106 Token contains 23 privileges 052042.106 Environment variables: 052042.108 ALLUSERSPROFILE=C:\ProgramData 052042.108+ APPDATA=C:\Users\Administrator\AppData\Roaming 052042.108+ CG_BOOST_ROOT=C:\Program Files (x86)\Embarcadero\RAD Studio\8.0\include\boost_1_39 052042.108+ CommonProgramFiles=C:\Program Files (x86)\Common Files 052042.108+ CommonProgramFiles(x86)=C:\Program Files (x86)\Common Files 052042.108+ CommonProgramW6432=C:\Program Files\Common Files 052042.108+ COMPUTERNAME=BASILISK 052042.108+ ComSpec=C:\Windows\system32\cmd.exe 052042.108+ configsetroot=C:\Windows\ConfigSetRoot 052042.108+ FP_NO_HOST_CHECK=NO 052042.108+ HOMEDRIVE=C: 052042.108+ HOMEPATH=\Users\Administrator 052042.108+ LOCALAPPDATA=C:\Users\Administrator\AppData\Local 052042.108+ LOGONSERVER=\\BASILISK 052042.108+ NUMBER_OF_PROCESSORS=8 052042.108+ OS=Windows_NT 052042.108+ Path=C:\Program Files (x86)\CollabNet\Subversion Client;C:\Program Files (x86)\Embarcadero\RAD Studio\8.0\bin;C:\Users\Public\Documents\RAD Studio\8.0\Bpl;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\WIDCOMM\Bluetooth Software\;C:\Program Files\WIDCOMM\Bluetooth Software\syswow64;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\WinMerge;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\ 052042.108+ PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC 052042.108+ PROCESSOR_ARCHITECTURE=AMD64 052042.108+ PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 30 Stepping 5, GenuineIntel 052042.108+ PROCESSOR_LEVEL=6 052042.108+ PROCESSOR_REVISION=1e05 052042.108+ ProgramData=C:\ProgramData 052042.108+ ProgramFiles=C:\Program Files (x86) 052042.108+ ProgramFiles(x86)=C:\Program Files (x86) 052042.108+ ProgramW6432=C:\Program Files 052042.108+ PSModulePath=C:\Windows\system32\WindowsPowerShell\v1.0\Modules\ 052042.108+ PUBLIC=C:\Users\Public 052042.108+ SESSIONNAME=Console 052042.108+ SystemDrive=C: 052042.108+ SystemRoot=C:\Windows 052042.108+ TEMP=C:\Users\ADMINI~1\AppData\Local\Temp 052042.108+ TMP=C:\Users\ADMINI~1\AppData\Local\Temp 052042.108+ USERDOMAIN=BASILISK 052042.108+ USERNAME=Administrator 052042.108+ USERPROFILE=C:\Users\Administrator 052042.108+ VBOX_INSTALL_PATH=C:\Program Files\Oracle\VirtualBox\ 052042.108+ windir=C:\Windows 052042.108 Process security context: 052042.108 UserName is “Administrator” 052042.108 Executable is “C:\My Source\DelphiXE\eSecurity\8.35\Debug\Win32\eSecurity.exe” 052042.108 Process ID is 9148 [0x000023BC] 052042.108 Priority class is Normal 052042.108 Executing as 32 bit on 64 bit 052042.108 Working set is 200.0 Kb to 1.348 Mb 052042.108 Process Permissions: 052042.108 Discretionary Access Control List [DACL]: 052042.109 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.109 AccessMask {0000 000 0 00011111 1111111111111111} is: 052042.109 STANDARD_RIGHTS_REQUIRED 052042.109 WINSTA_ACCESSCLIPBOARD 052042.109 WINSTA_ACCESSGLOBALATOMS 052042.109 WINSTA_CREATEDESKTOP 052042.109 WINSTA_ENUMDESKTOPS 052042.109 WINSTA_ENUMERATE 052042.109 WINSTA_EXITWINDOWS 052042.109 WINSTA_READATTRIBUTES 052042.109 WINSTA_READSCREEN 052042.109 WINSTA_WRITEATTRIBUTES 052042.109 1113216 [0x0010FC80] 052042.110 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.110 AccessMask {0000 000 0 00011111 1111111111111111} is: 052042.110 STANDARD_RIGHTS_REQUIRED 052042.110 WINSTA_ACCESSCLIPBOARD 052042.110 WINSTA_ACCESSGLOBALATOMS 052042.110 WINSTA_CREATEDESKTOP 052042.110 WINSTA_ENUMDESKTOPS 052042.110 WINSTA_ENUMERATE 052042.110 WINSTA_EXITWINDOWS 052042.110 WINSTA_READATTRIBUTES 052042.110 WINSTA_READSCREEN 052042.110 WINSTA_WRITEATTRIBUTES 052042.110 1113216 [0x0010FC80] 052042.111 ALLOW SID (S-1-5-5-0-21977247): 052042.111 AccessMask {0000 000 0 00010010 0001010000010001} is: 052042.111 STANDARD_RIGHTS_READ 052042.111 WINSTA_ENUMDESKTOPS 052042.111 WINSTA_WRITEATTRIBUTES 052042.111 1053696 [0x00101400] 052042.111 ACL has 3 ACEs. 052042.111 User logon security context: 052042.111 Logon is “Administrators” 052042.111 UserName is “Administrator” 052042.111 HostName is “BASILISK” 052042.123 Security group memberships: 052042.123 None enabled 052042.123 Everyone enabled 052042.123 HomeUsers enabled 052042.123 Administrators owner 052042.123 Users enabled 052042.123 INTERACTIVE enabled 052042.123 CONSOLE LOGON enabled 052042.123 Authenticated Users enabled 052042.123 This Organization enabled 052042.124 S-1-5-5-0-21977247 logon ID 052042.124 LOCAL enabled 052042.124 NTLM Authentication enabled 052042.124 High Mandatory Level integrity enabled 052042.124 Member of 13 groups. 052042.169 Privileges granted: 052042.169 SeIncreaseQuotaPrivilege Adjust memory quotas for a process 052042.169 DISABLED 052042.169 SeSecurityPrivilege Manage auditing and security log 052042.169 SE_PRIVILEGE_ENABLED 052042.169 SeTakeOwnershipPrivilege Take ownership of files or other objects 052042.169 SE_PRIVILEGE_ENABLED 052042.169 SeLoadDriverPrivilege Load and unload device drivers 052042.169 DISABLED 052042.169 SeSystemProfilePrivilege Profile system performance 052042.169 DISABLED 052042.169 SeSystemtimePrivilege Change the system time 052042.169 DISABLED 052042.169 SeProfileSingleProcessPrivilege Profile single process 052042.169 DISABLED 052042.169 SeIncreaseBasePriorityPrivilege Increase scheduling priority 052042.169 DISABLED 052042.169 SeCreatePagefilePrivilege Create a pagefile 052042.169 DISABLED 052042.169 SeBackupPrivilege Back up files and directories 052042.169 SE_PRIVILEGE_ENABLED 052042.169 SeRestorePrivilege Restore files and directories 052042.169 SE_PRIVILEGE_ENABLED 052042.169 SeShutdownPrivilege Shut down the system 052042.169 DISABLED 052042.169 SeDebugPrivilege Debug programs 052042.169 DISABLED 052042.169 SeSystemEnvironmentPrivilege Modify firmware environment values 052042.169 DISABLED 052042.169 SeChangeNotifyPrivilege Bypass traverse checking 052042.169 SE_PRIVILEGE_ENABLED_BY_DEFAULT 052042.169 SE_PRIVILEGE_ENABLED 052042.169 SeRemoteShutdownPrivilege Force shutdown from a remote system 052042.169 DISABLED 052042.169 SeUndockPrivilege Remove computer from docking station 052042.169 DISABLED 052042.169 SeManageVolumePrivilege Perform volume maintenance tasks 052042.169 DISABLED 052042.169 SeImpersonatePrivilege Impersonate a client after authentication 052042.169 SE_PRIVILEGE_ENABLED_BY_DEFAULT 052042.169 SE_PRIVILEGE_ENABLED 052042.169 SeCreateGlobalPrivilege Create global objects 052042.169 SE_PRIVILEGE_ENABLED_BY_DEFAULT 052042.169 SE_PRIVILEGE_ENABLED 052042.169 SeIncreaseWorkingSetPrivilege Increase a process working set 052042.169 DISABLED 052042.169 SeTimeZonePrivilege Change the time zone 052042.169 DISABLED 052042.169 SeCreateSymbolicLinkPrivilege Create symbolic links 052042.169 DISABLED 052042.169 Logon has 23 privileges. 052042.170 Security information for “C:\Windows\”: 052042.170 Owner is “NT SERVICE\TrustedInstaller”. 052042.170 Discretionary Access Control List [DACL]: 052042.170 ALLOW SID NT SERVICE@ TrustedInstaller (S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464): 052042.170 AccessMask {0000 000 0 00011111 0000000111111111} is: 052042.170 Full control 052042.170 ALLOW SID NT SERVICE@ TrustedInstaller (S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464): 052042.170 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.170 Full control 052042.170 ACE Flags: 052042.170 CONTAINER_INHERIT_ACE 052042.170 INHERIT_ONLY_ACE 052042.170 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.170 AccessMask {0000 000 0 00010011 0000000110111111} is: 052042.170 Modify 052042.170 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.170 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.170 Full control 052042.170 ACE Flags: 052042.170 OBJECT_INHERIT_ACE 052042.170 CONTAINER_INHERIT_ACE 052042.170 INHERIT_ONLY_ACE 052042.170 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.170 AccessMask {0000 000 0 00010011 0000000110111111} is: 052042.170 Modify 052042.171 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.171 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.171 Full control 052042.171 ACE Flags: 052042.171 OBJECT_INHERIT_ACE 052042.171 CONTAINER_INHERIT_ACE 052042.171 INHERIT_ONLY_ACE 052042.171 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.171 AccessMask {0000 000 0 00010010 0000000010101001} is: 052042.171 Read and execute 052042.171 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.171 AccessMask {1010 000 0 00000000 0000000000000000} is: 052042.171 Traverse Folder / Execute File 052042.171 List Folder / Read Data 052042.171 Read Extended Attributes 052042.171 Read Permissions 052042.171 1048576 [0x00100000] 052042.171 ACE Flags: 052042.171 OBJECT_INHERIT_ACE 052042.171 CONTAINER_INHERIT_ACE 052042.171 INHERIT_ONLY_ACE 052042.172 ALLOW SID CREATOR OWNER (S-1-3-0): 052042.172 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.172 Full control 052042.172 ACE Flags: 052042.172 OBJECT_INHERIT_ACE 052042.172 CONTAINER_INHERIT_ACE 052042.172 INHERIT_ONLY_ACE 052042.172 ACL has 9 ACEs. 052042.174 Administrator has restricted access! 052042.174 Security information for Registry key: 052042.174 Hive HKEY_LOCAL_MACHINE 052042.174 Key “\SOFTWARE\Data Access Corporation\Visual DataFlex\7\defaults” 052042.174 Owner is “BUILTIN\Administrators”. 052042.174 Discretionary Access Control List [DACL]: 052042.174 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.174 AccessMask {0000 000 0 00000010 0000000000011001} is: 052042.174 STANDARD_RIGHTS_READ 2 052042.174 KEY_QUERY_VALUE 052042.174 KEY_ENUMERATE_SUB_KEYS 052042.174 KEY_NOTIFY 052042.174 ACE Flags: 052042.174 INHERITED_ACE 052042.174 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.174 AccessMask {1000 000 0 00000000 0000000000000000} is: 052042.174 STANDARD_RIGHTS_READ 2 052042.174 KEY_QUERY_VALUE 052042.174 KEY_ENUMERATE_SUB_KEYS 052042.174 KEY_NOTIFY 052042.174 1048576 [0x00100000] 052042.174 ACE Flags: 052042.174 CONTAINER_INHERIT_ACE 052042.174 INHERIT_ONLY_ACE 052042.174 INHERITED_ACE 052042.174 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.174 AccessMask {0000 000 0 00001111 0000000000111111} is: 052042.174 STANDARD_RIGHTS_READ 2 052042.174 KEY_QUERY_VALUE 052042.174 KEY_ENUMERATE_SUB_KEYS 052042.174 KEY_NOTIFY 052042.174 KEY_CREATE_SUB_KEY 052042.174 KEY_CREATE_LINK 052042.174 KEY_SET_VALUE 052042.174 WRITE_DAC 052042.174 WRITE_OWNER 052042.174 DELETE 052042.174 ACE Flags: 052042.174 INHERITED_ACE 052042.174 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.174 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.174 STANDARD_RIGHTS_READ 2 052042.174 KEY_QUERY_VALUE 052042.174 KEY_ENUMERATE_SUB_KEYS 052042.174 KEY_NOTIFY 052042.174 KEY_CREATE_SUB_KEY 052042.174 KEY_CREATE_LINK 052042.174 KEY_SET_VALUE 052042.174 WRITE_DAC 052042.174 WRITE_OWNER 052042.174 DELETE 052042.174 ACE Flags: 052042.174 CONTAINER_INHERIT_ACE 052042.174 INHERIT_ONLY_ACE 052042.174 INHERITED_ACE 052042.174 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.174 AccessMask {0000 000 0 00001111 0000000000111111} is: 052042.174 STANDARD_RIGHTS_READ 2 052042.174 KEY_QUERY_VALUE 052042.174 KEY_ENUMERATE_SUB_KEYS 052042.174 KEY_NOTIFY 052042.174 KEY_CREATE_SUB_KEY 052042.174 KEY_CREATE_LINK 052042.174 KEY_SET_VALUE 052042.174 WRITE_DAC 052042.174 WRITE_OWNER 052042.174 DELETE 052042.174 ACE Flags: 052042.174 INHERITED_ACE 052042.174 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.174 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.174 STANDARD_RIGHTS_READ 2 052042.174 KEY_QUERY_VALUE 052042.174 KEY_ENUMERATE_SUB_KEYS 052042.174 KEY_NOTIFY 052042.174 KEY_CREATE_SUB_KEY 052042.174 KEY_CREATE_LINK 052042.174 KEY_SET_VALUE 052042.174 WRITE_DAC 052042.174 WRITE_OWNER 052042.174 DELETE 052042.174 ACE Flags: 052042.174 CONTAINER_INHERIT_ACE 052042.174 INHERIT_ONLY_ACE 052042.174 INHERITED_ACE 052042.174 ALLOW SID CREATOR OWNER (S-1-3-0): 052042.174 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.174 STANDARD_RIGHTS_READ 2 052042.174 KEY_QUERY_VALUE 052042.174 KEY_ENUMERATE_SUB_KEYS 052042.174 KEY_NOTIFY 052042.174 KEY_CREATE_SUB_KEY 052042.174 KEY_CREATE_LINK 052042.174 KEY_SET_VALUE 052042.174 WRITE_DAC 052042.174 WRITE_OWNER 052042.174 DELETE 052042.174 ACE Flags: 052042.174 CONTAINER_INHERIT_ACE 052042.174 INHERIT_ONLY_ACE 052042.174 INHERITED_ACE 052042.174 ACL has 7 ACEs. 052042.176 Administrator has “Full Control”. 052042.177 Security information for Registry key: 052042.177 Hive HKEY_LOCAL_MACHINE 052042.177 Key “\SOFTWARE\Data Access Corporation\Visual DataFlex\7\Workspaces” 052042.177 Owner is “BUILTIN\Administrators”. 052042.177 Discretionary Access Control List [DACL]: 052042.177 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.177 AccessMask {0000 000 0 00000010 0000000000011001} is: 052042.177 STANDARD_RIGHTS_READ 2 052042.177 KEY_QUERY_VALUE 052042.177 KEY_ENUMERATE_SUB_KEYS 052042.177 KEY_NOTIFY 052042.177 ACE Flags: 052042.177 INHERITED_ACE 052042.177 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.177 AccessMask {1000 000 0 00000000 0000000000000000} is: 052042.177 STANDARD_RIGHTS_READ 2 052042.177 KEY_QUERY_VALUE 052042.177 KEY_ENUMERATE_SUB_KEYS 052042.177 KEY_NOTIFY 052042.177 1048576 [0x00100000] 052042.177 ACE Flags: 052042.177 CONTAINER_INHERIT_ACE 052042.177 INHERIT_ONLY_ACE 052042.177 INHERITED_ACE 052042.177 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.177 AccessMask {0000 000 0 00001111 0000000000111111} is: 052042.177 STANDARD_RIGHTS_READ 2 052042.177 KEY_QUERY_VALUE 052042.177 KEY_ENUMERATE_SUB_KEYS 052042.177 KEY_NOTIFY 052042.177 KEY_CREATE_SUB_KEY 052042.177 KEY_CREATE_LINK 052042.177 KEY_SET_VALUE 052042.177 WRITE_DAC 052042.177 WRITE_OWNER 052042.177 DELETE 052042.177 ACE Flags: 052042.177 INHERITED_ACE 052042.177 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.177 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.177 STANDARD_RIGHTS_READ 2 052042.177 KEY_QUERY_VALUE 052042.177 KEY_ENUMERATE_SUB_KEYS 052042.177 KEY_NOTIFY 052042.177 KEY_CREATE_SUB_KEY 052042.177 KEY_CREATE_LINK 052042.177 KEY_SET_VALUE 052042.177 WRITE_DAC 052042.177 WRITE_OWNER 052042.177 DELETE 052042.177 ACE Flags: 052042.177 CONTAINER_INHERIT_ACE 052042.177 INHERIT_ONLY_ACE 052042.177 INHERITED_ACE 052042.177 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.177 AccessMask {0000 000 0 00001111 0000000000111111} is: 052042.177 STANDARD_RIGHTS_READ 2 052042.177 KEY_QUERY_VALUE 052042.177 KEY_ENUMERATE_SUB_KEYS 052042.177 KEY_NOTIFY 052042.177 KEY_CREATE_SUB_KEY 052042.177 KEY_CREATE_LINK 052042.177 KEY_SET_VALUE 052042.177 WRITE_DAC 052042.177 WRITE_OWNER 052042.177 DELETE 052042.177 ACE Flags: 052042.177 INHERITED_ACE 052042.177 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.177 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.177 STANDARD_RIGHTS_READ 2 052042.177 KEY_QUERY_VALUE 052042.177 KEY_ENUMERATE_SUB_KEYS 052042.177 KEY_NOTIFY 052042.177 KEY_CREATE_SUB_KEY 052042.177 KEY_CREATE_LINK 052042.177 KEY_SET_VALUE 052042.177 WRITE_DAC 052042.177 WRITE_OWNER 052042.177 DELETE 052042.177 ACE Flags: 052042.177 CONTAINER_INHERIT_ACE 052042.177 INHERIT_ONLY_ACE 052042.177 INHERITED_ACE 052042.177 ALLOW SID CREATOR OWNER (S-1-3-0): 052042.177 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.177 STANDARD_RIGHTS_READ 2 052042.177 KEY_QUERY_VALUE 052042.177 KEY_ENUMERATE_SUB_KEYS 052042.177 KEY_NOTIFY 052042.177 KEY_CREATE_SUB_KEY 052042.177 KEY_CREATE_LINK 052042.177 KEY_SET_VALUE 052042.177 WRITE_DAC 052042.177 WRITE_OWNER 052042.177 DELETE 052042.177 ACE Flags: 052042.177 CONTAINER_INHERIT_ACE 052042.177 INHERIT_ONLY_ACE 052042.177 INHERITED_ACE 052042.177 ACL has 7 ACEs. 052042.179 Administrator has “Full Control”. 052042.179 Security information for Registry key: 052042.179 Hive HKEY_LOCAL_MACHINE 052042.179 Key “\SOFTWARE\Data Access Corporation\Visual DataFlex\7\Workspaces\Export-it” 052042.179 Owner is “BUILTIN\Administrators”. 052042.179 Discretionary Access Control List [DACL]: 052042.179 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.179 AccessMask {0000 000 0 00000010 0000000000011001} is: 052042.179 STANDARD_RIGHTS_READ 2 052042.179 KEY_QUERY_VALUE 052042.179 KEY_ENUMERATE_SUB_KEYS 052042.180 KEY_NOTIFY 052042.180 ACE Flags: 052042.180 INHERITED_ACE 052042.180 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.180 AccessMask {1000 000 0 00000000 0000000000000000} is: 052042.180 STANDARD_RIGHTS_READ 2 052042.180 KEY_QUERY_VALUE 052042.180 KEY_ENUMERATE_SUB_KEYS 052042.180 KEY_NOTIFY 052042.180 1048576 [0x00100000] 052042.180 ACE Flags: 052042.180 CONTAINER_INHERIT_ACE 052042.180 INHERIT_ONLY_ACE 052042.180 INHERITED_ACE 052042.180 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.180 AccessMask {0000 000 0 00001111 0000000000111111} is: 052042.180 STANDARD_RIGHTS_READ 2 052042.180 KEY_QUERY_VALUE 052042.180 KEY_ENUMERATE_SUB_KEYS 052042.180 KEY_NOTIFY 052042.180 KEY_CREATE_SUB_KEY 052042.180 KEY_CREATE_LINK 052042.180 KEY_SET_VALUE 052042.180 WRITE_DAC 052042.180 WRITE_OWNER 052042.180 DELETE 052042.180 ACE Flags: 052042.180 INHERITED_ACE 052042.180 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.180 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.180 STANDARD_RIGHTS_READ 2 052042.180 KEY_QUERY_VALUE 052042.180 KEY_ENUMERATE_SUB_KEYS 052042.180 KEY_NOTIFY 052042.180 KEY_CREATE_SUB_KEY 052042.180 KEY_CREATE_LINK 052042.180 KEY_SET_VALUE 052042.180 WRITE_DAC 052042.180 WRITE_OWNER 052042.180 DELETE 052042.180 ACE Flags: 052042.180 CONTAINER_INHERIT_ACE 052042.180 INHERIT_ONLY_ACE 052042.180 INHERITED_ACE 052042.180 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.180 AccessMask {0000 000 0 00001111 0000000000111111} is: 052042.180 STANDARD_RIGHTS_READ 2 052042.180 KEY_QUERY_VALUE 052042.180 KEY_ENUMERATE_SUB_KEYS 052042.180 KEY_NOTIFY 052042.180 KEY_CREATE_SUB_KEY 052042.180 KEY_CREATE_LINK 052042.180 KEY_SET_VALUE 052042.180 WRITE_DAC 052042.180 WRITE_OWNER 052042.180 DELETE 052042.180 ACE Flags: 052042.180 INHERITED_ACE 052042.180 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.180 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.180 STANDARD_RIGHTS_READ 2 052042.180 KEY_QUERY_VALUE 052042.180 KEY_ENUMERATE_SUB_KEYS 052042.180 KEY_NOTIFY 052042.180 KEY_CREATE_SUB_KEY 052042.180 KEY_CREATE_LINK 052042.180 KEY_SET_VALUE 052042.180 WRITE_DAC 052042.180 WRITE_OWNER 052042.180 DELETE 052042.180 ACE Flags: 052042.180 CONTAINER_INHERIT_ACE 052042.180 INHERIT_ONLY_ACE 052042.180 INHERITED_ACE 052042.180 ALLOW SID CREATOR OWNER (S-1-3-0): 052042.180 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.180 STANDARD_RIGHTS_READ 2 052042.180 KEY_QUERY_VALUE 052042.180 KEY_ENUMERATE_SUB_KEYS 052042.180 KEY_NOTIFY 052042.180 KEY_CREATE_SUB_KEY 052042.180 KEY_CREATE_LINK 052042.180 KEY_SET_VALUE 052042.180 WRITE_DAC 052042.180 WRITE_OWNER 052042.180 DELETE 052042.180 ACE Flags: 052042.180 CONTAINER_INHERIT_ACE 052042.180 INHERIT_ONLY_ACE 052042.180 INHERITED_ACE 052042.180 ACL has 7 ACEs. 052042.182 Administrator has “Full Control”. 052042.182 Security information for Registry key: 052042.182 Hive HKEY_LOCAL_MACHINE 052042.182 Key “\SOFTWARE\Data Access Corporation\Visual DataFlex\5\defaults” 052042.182 Owner is “BUILTIN\Administrators”. 052042.182 Discretionary Access Control List [DACL]: 052042.182 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.182 AccessMask {0000 000 0 00000010 0000000000011001} is: 052042.182 STANDARD_RIGHTS_READ 2 052042.182 KEY_QUERY_VALUE 052042.182 KEY_ENUMERATE_SUB_KEYS 052042.182 KEY_NOTIFY 052042.182 ACE Flags: 052042.182 INHERITED_ACE 052042.182 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.182 AccessMask {1000 000 0 00000000 0000000000000000} is: 052042.182 STANDARD_RIGHTS_READ 2 052042.182 KEY_QUERY_VALUE 052042.182 KEY_ENUMERATE_SUB_KEYS 052042.182 KEY_NOTIFY 052042.182 1048576 [0x00100000] 052042.182 ACE Flags: 052042.182 CONTAINER_INHERIT_ACE 052042.182 INHERIT_ONLY_ACE 052042.182 INHERITED_ACE 052042.182 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.182 AccessMask {0000 000 0 00001111 0000000000111111} is: 052042.182 STANDARD_RIGHTS_READ 2 052042.182 KEY_QUERY_VALUE 052042.182 KEY_ENUMERATE_SUB_KEYS 052042.182 KEY_NOTIFY 052042.182 KEY_CREATE_SUB_KEY 052042.182 KEY_CREATE_LINK 052042.182 KEY_SET_VALUE 052042.182 WRITE_DAC 052042.182 WRITE_OWNER 052042.182 DELETE 052042.182 ACE Flags: 052042.182 INHERITED_ACE 052042.182 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.182 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.182 STANDARD_RIGHTS_READ 2 052042.182 KEY_QUERY_VALUE 052042.182 KEY_ENUMERATE_SUB_KEYS 052042.182 KEY_NOTIFY 052042.182 KEY_CREATE_SUB_KEY 052042.182 KEY_CREATE_LINK 052042.182 KEY_SET_VALUE 052042.182 WRITE_DAC 052042.182 WRITE_OWNER 052042.182 DELETE 052042.182 ACE Flags: 052042.182 CONTAINER_INHERIT_ACE 052042.182 INHERIT_ONLY_ACE 052042.182 INHERITED_ACE 052042.182 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.182 AccessMask {0000 000 0 00001111 0000000000111111} is: 052042.182 STANDARD_RIGHTS_READ 2 052042.182 KEY_QUERY_VALUE 052042.182 KEY_ENUMERATE_SUB_KEYS 052042.182 KEY_NOTIFY 052042.182 KEY_CREATE_SUB_KEY 052042.182 KEY_CREATE_LINK 052042.182 KEY_SET_VALUE 052042.182 WRITE_DAC 052042.182 WRITE_OWNER 052042.182 DELETE 052042.182 ACE Flags: 052042.182 INHERITED_ACE 052042.182 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.182 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.182 STANDARD_RIGHTS_READ 2 052042.182 KEY_QUERY_VALUE 052042.182 KEY_ENUMERATE_SUB_KEYS 052042.182 KEY_NOTIFY 052042.182 KEY_CREATE_SUB_KEY 052042.182 KEY_CREATE_LINK 052042.182 KEY_SET_VALUE 052042.182 WRITE_DAC 052042.182 WRITE_OWNER 052042.182 DELETE 052042.182 ACE Flags: 052042.182 CONTAINER_INHERIT_ACE 052042.182 INHERIT_ONLY_ACE 052042.182 INHERITED_ACE 052042.182 ALLOW SID CREATOR OWNER (S-1-3-0): 052042.182 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.182 STANDARD_RIGHTS_READ 2 052042.182 KEY_QUERY_VALUE 052042.182 KEY_ENUMERATE_SUB_KEYS 052042.183 KEY_NOTIFY 052042.183 KEY_CREATE_SUB_KEY 052042.183 KEY_CREATE_LINK 052042.183 KEY_SET_VALUE 052042.183 WRITE_DAC 052042.183 WRITE_OWNER 052042.183 DELETE 052042.183 ACE Flags: 052042.183 CONTAINER_INHERIT_ACE 052042.183 INHERIT_ONLY_ACE 052042.183 INHERITED_ACE 052042.183 ACL has 7 ACEs. 052042.185 Administrator has “Full Control”. 052042.185 Security information for Registry key: 052042.185 Hive HKEY_LOCAL_MACHINE 052042.185 Key “\SOFTWARE\Data Access Corporation\Visual DataFlex\5\Workspaces” 052042.185 Owner is “BUILTIN\Administrators”. 052042.185 Discretionary Access Control List [DACL]: 052042.185 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.185 AccessMask {0000 000 0 00000010 0000000000011001} is: 052042.185 STANDARD_RIGHTS_READ 2 052042.185 KEY_QUERY_VALUE 052042.185 KEY_ENUMERATE_SUB_KEYS 052042.185 KEY_NOTIFY 052042.185 ACE Flags: 052042.185 INHERITED_ACE 052042.185 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.185 AccessMask {1000 000 0 00000000 0000000000000000} is: 052042.185 STANDARD_RIGHTS_READ 2 052042.185 KEY_QUERY_VALUE 052042.185 KEY_ENUMERATE_SUB_KEYS 052042.185 KEY_NOTIFY 052042.185 1048576 [0x00100000] 052042.185 ACE Flags: 052042.185 CONTAINER_INHERIT_ACE 052042.185 INHERIT_ONLY_ACE 052042.185 INHERITED_ACE 052042.185 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.185 AccessMask {0000 000 0 00001111 0000000000111111} is: 052042.185 STANDARD_RIGHTS_READ 2 052042.185 KEY_QUERY_VALUE 052042.185 KEY_ENUMERATE_SUB_KEYS 052042.185 KEY_NOTIFY 052042.185 KEY_CREATE_SUB_KEY 052042.185 KEY_CREATE_LINK 052042.185 KEY_SET_VALUE 052042.185 WRITE_DAC 052042.185 WRITE_OWNER 052042.185 DELETE 052042.185 ACE Flags: 052042.185 INHERITED_ACE 052042.185 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.185 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.185 STANDARD_RIGHTS_READ 2 052042.185 KEY_QUERY_VALUE 052042.185 KEY_ENUMERATE_SUB_KEYS 052042.185 KEY_NOTIFY 052042.185 KEY_CREATE_SUB_KEY 052042.185 KEY_CREATE_LINK 052042.185 KEY_SET_VALUE 052042.185 WRITE_DAC 052042.185 WRITE_OWNER 052042.185 DELETE 052042.185 ACE Flags: 052042.185 CONTAINER_INHERIT_ACE 052042.185 INHERIT_ONLY_ACE 052042.185 INHERITED_ACE 052042.185 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.185 AccessMask {0000 000 0 00001111 0000000000111111} is: 052042.185 STANDARD_RIGHTS_READ 2 052042.185 KEY_QUERY_VALUE 052042.185 KEY_ENUMERATE_SUB_KEYS 052042.185 KEY_NOTIFY 052042.185 KEY_CREATE_SUB_KEY 052042.185 KEY_CREATE_LINK 052042.185 KEY_SET_VALUE 052042.185 WRITE_DAC 052042.185 WRITE_OWNER 052042.185 DELETE 052042.185 ACE Flags: 052042.185 INHERITED_ACE 052042.185 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.185 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.185 STANDARD_RIGHTS_READ 2 052042.185 KEY_QUERY_VALUE 052042.185 KEY_ENUMERATE_SUB_KEYS 052042.185 KEY_NOTIFY 052042.185 KEY_CREATE_SUB_KEY 052042.185 KEY_CREATE_LINK 052042.185 KEY_SET_VALUE 052042.185 WRITE_DAC 052042.185 WRITE_OWNER 052042.185 DELETE 052042.185 ACE Flags: 052042.185 CONTAINER_INHERIT_ACE 052042.185 INHERIT_ONLY_ACE 052042.185 INHERITED_ACE 052042.185 ALLOW SID CREATOR OWNER (S-1-3-0): 052042.185 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.185 STANDARD_RIGHTS_READ 2 052042.185 KEY_QUERY_VALUE 052042.185 KEY_ENUMERATE_SUB_KEYS 052042.185 KEY_NOTIFY 052042.185 KEY_CREATE_SUB_KEY 052042.185 KEY_CREATE_LINK 052042.185 KEY_SET_VALUE 052042.185 WRITE_DAC 052042.185 WRITE_OWNER 052042.185 DELETE 052042.185 ACE Flags: 052042.185 CONTAINER_INHERIT_ACE 052042.185 INHERIT_ONLY_ACE 052042.185 INHERITED_ACE 052042.185 ACL has 7 ACEs. 052042.188 Administrator has “Full Control”. 052042.188 Security information for Registry key: 052042.188 Hive HKEY_LOCAL_MACHINE 052042.188 Key “\SOFTWARE\Data Access Corporation\Visual DataFlex\5\Workspaces\Export-it Plus” 052042.188 Owner is “BUILTIN\Administrators”. 052042.188 Discretionary Access Control List [DACL]: 052042.188 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.188 AccessMask {0000 000 0 00000010 0000000000011001} is: 052042.188 STANDARD_RIGHTS_READ 2 052042.188 KEY_QUERY_VALUE 052042.188 KEY_ENUMERATE_SUB_KEYS 052042.188 KEY_NOTIFY 052042.188 ACE Flags: 052042.188 INHERITED_ACE 052042.188 ALLOW SID BUILTIN@ Users (S-1-5-32-545): 052042.188 AccessMask {1000 000 0 00000000 0000000000000000} is: 052042.188 STANDARD_RIGHTS_READ 2 052042.188 KEY_QUERY_VALUE 052042.188 KEY_ENUMERATE_SUB_KEYS 052042.188 KEY_NOTIFY 052042.188 1048576 [0x00100000] 052042.188 ACE Flags: 052042.188 CONTAINER_INHERIT_ACE 052042.188 INHERIT_ONLY_ACE 052042.188 INHERITED_ACE 052042.188 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.188 AccessMask {0000 000 0 00001111 0000000000111111} is: 052042.188 STANDARD_RIGHTS_READ 2 052042.188 KEY_QUERY_VALUE 052042.188 KEY_ENUMERATE_SUB_KEYS 052042.188 KEY_NOTIFY 052042.188 KEY_CREATE_SUB_KEY 052042.188 KEY_CREATE_LINK 052042.188 KEY_SET_VALUE 052042.188 WRITE_DAC 052042.188 WRITE_OWNER 052042.188 DELETE 052042.188 ACE Flags: 052042.188 INHERITED_ACE 052042.188 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.188 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.188 STANDARD_RIGHTS_READ 2 052042.188 KEY_QUERY_VALUE 052042.188 KEY_ENUMERATE_SUB_KEYS 052042.188 KEY_NOTIFY 052042.188 KEY_CREATE_SUB_KEY 052042.188 KEY_CREATE_LINK 052042.188 KEY_SET_VALUE 052042.188 WRITE_DAC 052042.188 WRITE_OWNER 052042.188 DELETE 052042.188 ACE Flags: 052042.188 CONTAINER_INHERIT_ACE 052042.188 INHERIT_ONLY_ACE 052042.188 INHERITED_ACE 052042.188 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.188 AccessMask {0000 000 0 00001111 0000000000111111} is: 052042.188 STANDARD_RIGHTS_READ 2 052042.188 KEY_QUERY_VALUE 052042.188 KEY_ENUMERATE_SUB_KEYS 052042.188 KEY_NOTIFY 052042.188 KEY_CREATE_SUB_KEY 052042.188 KEY_CREATE_LINK 052042.188 KEY_SET_VALUE 052042.188 WRITE_DAC 052042.188 WRITE_OWNER 052042.188 DELETE 052042.188 ACE Flags: 052042.188 INHERITED_ACE 052042.188 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.188 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.188 STANDARD_RIGHTS_READ 2 052042.188 KEY_QUERY_VALUE 052042.188 KEY_ENUMERATE_SUB_KEYS 052042.188 KEY_NOTIFY 052042.188 KEY_CREATE_SUB_KEY 052042.188 KEY_CREATE_LINK 052042.188 KEY_SET_VALUE 052042.188 WRITE_DAC 052042.188 WRITE_OWNER 052042.188 DELETE 052042.188 ACE Flags: 052042.188 CONTAINER_INHERIT_ACE 052042.188 INHERIT_ONLY_ACE 052042.188 INHERITED_ACE 052042.188 ALLOW SID CREATOR OWNER (S-1-3-0): 052042.188 AccessMask {0001 000 0 00000000 0000000000000000} is: 052042.188 STANDARD_RIGHTS_READ 2 052042.188 KEY_QUERY_VALUE 052042.188 KEY_ENUMERATE_SUB_KEYS 052042.188 KEY_NOTIFY 052042.188 KEY_CREATE_SUB_KEY 052042.188 KEY_CREATE_LINK 052042.188 KEY_SET_VALUE 052042.188 WRITE_DAC 052042.188 WRITE_OWNER 052042.188 DELETE 052042.188 ACE Flags: 052042.188 CONTAINER_INHERIT_ACE 052042.188 INHERIT_ONLY_ACE 052042.188 INHERITED_ACE 052042.188 ACL has 7 ACEs. 052042.190 Administrator has “Full Control”. 052042.190 * Export-It Database drive root folder not found! 052042.190 * Export-It Platform drive root folder not found! 052042.190 * Export-It Plus Database drive root folder not found! 052042.190 * Export-It Plus Platform drive root folder not found! 052042.191 WinStation Permissions: 052042.191 Discretionary Access Control List [DACL]: 052042.192 ALLOW SID BASILISK@ Administrator (S-1-5-21-361490850-739622785-3183264772-500): 052042.192 AccessMask {0000 000 0 00000000 0000000000100100} is: 052042.192 WINSTA_ACCESSCLIPBOARD 052042.192 WINSTA_ACCESSGLOBALATOMS 052042.192 ACE Flags: 052042.192 NO_PROPAGATE_INHERIT_ACE 052042.193 ALLOW SID (S-1-5-5-0-21977247): 052042.193 AccessMask {1111 000 0 00000000 0000000000000000} is: 052042.193 STANDARD_RIGHTS_REQUIRED 052042.193 WINSTA_ACCESSCLIPBOARD 052042.193 WINSTA_ACCESSGLOBALATOMS 052042.193 WINSTA_CREATEDESKTOP 052042.193 WINSTA_ENUMDESKTOPS 052042.193 WINSTA_ENUMERATE 052042.193 WINSTA_EXITWINDOWS 052042.193 WINSTA_READATTRIBUTES 052042.193 WINSTA_READSCREEN 052042.193 WINSTA_WRITEATTRIBUTES 052042.193 ACE Flags: 052042.193 OBJECT_INHERIT_ACE 052042.193 CONTAINER_INHERIT_ACE 052042.193 INHERIT_ONLY_ACE 052042.194 ALLOW SID (S-1-5-5-0-21977247): 052042.194 AccessMask {0000 000 0 00001111 0000001101111111} is: 052042.194 STANDARD_RIGHTS_REQUIRED 052042.194 WINSTA_ACCESSCLIPBOARD 052042.194 WINSTA_ACCESSGLOBALATOMS 052042.194 WINSTA_CREATEDESKTOP 052042.194 WINSTA_ENUMDESKTOPS 052042.194 WINSTA_ENUMERATE 052042.194 WINSTA_EXITWINDOWS 052042.194 WINSTA_READATTRIBUTES 052042.194 WINSTA_READSCREEN 052042.194 WINSTA_WRITEATTRIBUTES 052042.194 ACE Flags: 052042.194 NO_PROPAGATE_INHERIT_ACE 052042.195 ALLOW SID NT AUTHORITY@ RESTRICTED (S-1-5-12): 052042.195 AccessMask {1111 000 0 00000000 0000000000000000} is: 052042.195 STANDARD_RIGHTS_REQUIRED 052042.195 WINSTA_ACCESSCLIPBOARD 052042.195 WINSTA_ACCESSGLOBALATOMS 052042.195 WINSTA_CREATEDESKTOP 052042.195 WINSTA_ENUMDESKTOPS 052042.195 WINSTA_ENUMERATE 052042.195 WINSTA_EXITWINDOWS 052042.195 WINSTA_READATTRIBUTES 052042.195 WINSTA_READSCREEN 052042.195 WINSTA_WRITEATTRIBUTES 052042.195 ACE Flags: 052042.195 OBJECT_INHERIT_ACE 052042.195 CONTAINER_INHERIT_ACE 052042.195 INHERIT_ONLY_ACE 052042.195 ALLOW SID NT AUTHORITY@ RESTRICTED (S-1-5-12): 052042.195 AccessMask {0000 000 0 00001111 0000001101111111} is: 052042.195 STANDARD_RIGHTS_REQUIRED 052042.195 WINSTA_ACCESSCLIPBOARD 052042.195 WINSTA_ACCESSGLOBALATOMS 052042.195 WINSTA_CREATEDESKTOP 052042.195 WINSTA_ENUMDESKTOPS 052042.195 WINSTA_ENUMERATE 052042.195 WINSTA_EXITWINDOWS 052042.195 WINSTA_READATTRIBUTES 052042.195 WINSTA_READSCREEN 052042.195 WINSTA_WRITEATTRIBUTES 052042.195 ACE Flags: 052042.195 NO_PROPAGATE_INHERIT_ACE 052042.195 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.195 AccessMask {0010 000 0 00000000 0000000011000111} is: 052042.195 WINSTA_ACCESSCLIPBOARD 052042.195 WINSTA_ACCESSGLOBALATOMS 052042.195 WINSTA_ENUMDESKTOPS 052042.195 WINSTA_EXITWINDOWS 052042.195 WINSTA_READATTRIBUTES 052042.195 128 [0x00000080] 052042.195 ACE Flags: 052042.195 OBJECT_INHERIT_ACE 052042.195 CONTAINER_INHERIT_ACE 052042.195 INHERIT_ONLY_ACE 052042.195 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.195 AccessMask {0000 000 0 00000010 0000000101100110} is: 052042.195 STANDARD_RIGHTS_READ 052042.195 WINSTA_ACCESSCLIPBOARD 052042.195 WINSTA_ACCESSGLOBALATOMS 052042.195 WINSTA_ENUMERATE 052042.195 WINSTA_EXITWINDOWS 052042.195 WINSTA_READATTRIBUTES 052042.195 ACE Flags: 052042.195 NO_PROPAGATE_INHERIT_ACE 052042.195 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.195 AccessMask {1111 000 0 00000000 0000000000000000} is: 052042.195 STANDARD_RIGHTS_REQUIRED 052042.195 WINSTA_ACCESSCLIPBOARD 052042.195 WINSTA_ACCESSGLOBALATOMS 052042.195 WINSTA_CREATEDESKTOP 052042.195 WINSTA_ENUMDESKTOPS 052042.195 WINSTA_ENUMERATE 052042.195 WINSTA_EXITWINDOWS 052042.195 WINSTA_READATTRIBUTES 052042.195 WINSTA_READSCREEN 052042.195 WINSTA_WRITEATTRIBUTES 052042.195 ACE Flags: 052042.195 OBJECT_INHERIT_ACE 052042.195 CONTAINER_INHERIT_ACE 052042.195 INHERIT_ONLY_ACE 052042.195 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.195 AccessMask {0000 000 0 00001111 0000001101111111} is: 052042.195 STANDARD_RIGHTS_REQUIRED 052042.195 WINSTA_ACCESSCLIPBOARD 052042.195 WINSTA_ACCESSGLOBALATOMS 052042.195 WINSTA_CREATEDESKTOP 052042.195 WINSTA_ENUMDESKTOPS 052042.195 WINSTA_ENUMERATE 052042.195 WINSTA_EXITWINDOWS 052042.195 WINSTA_READATTRIBUTES 052042.195 WINSTA_READSCREEN 052042.195 WINSTA_WRITEATTRIBUTES 052042.195 ACE Flags: 052042.195 NO_PROPAGATE_INHERIT_ACE 052042.196 ACL has 9 ACEs. 052042.196 Desktop Permissions: 052042.196 Discretionary Access Control List [DACL]: 052042.197 ALLOW SID (S-1-5-5-0-21977247): 052042.197 AccessMask {0000 000 0 00001111 0000000111111111} is: 052042.197 STANDARD_RIGHTS_READ 052042.197 DESKTOP_ENUMERATE 052042.197 DESKTOP_READOBJECTS 052042.197 DESKTOP_CREATEMENU 052042.197 DESKTOP_CREATEWINDOW 052042.197 DESKTOP_HOOKCONTROL 052042.197 DESKTOP_JOURNALPLAYBACK 052042.197 DESKTOP_JOURNALRECORD 052042.197 DESKTOP_WRITEOBJECTS 052042.197 DESKTOP_SWITCHDESKTOP 052042.197 WRITE_DAC 052042.197 WRITE_OWNER 052042.197 DELETE 052042.197 ALLOW SID NT AUTHORITY@ RESTRICTED (S-1-5-12): 052042.197 AccessMask {0000 000 0 00001111 0000000111111111} is: 052042.197 STANDARD_RIGHTS_READ 052042.197 DESKTOP_ENUMERATE 052042.197 DESKTOP_READOBJECTS 052042.197 DESKTOP_CREATEMENU 052042.197 DESKTOP_CREATEWINDOW 052042.197 DESKTOP_HOOKCONTROL 052042.197 DESKTOP_JOURNALPLAYBACK 052042.197 DESKTOP_JOURNALRECORD 052042.197 DESKTOP_WRITEOBJECTS 052042.197 DESKTOP_SWITCHDESKTOP 052042.197 WRITE_DAC 052042.197 WRITE_OWNER 052042.197 DELETE 052042.197 ALLOW SID BUILTIN@ Administrators (S-1-5-32-544): 052042.197 AccessMask {0000 000 0 00000010 0000000111000111} is: 052042.197 STANDARD_RIGHTS_READ 052042.197 DESKTOP_ENUMERATE 052042.197 DESKTOP_READOBJECTS 052042.197 DESKTOP_CREATEMENU 052042.197 DESKTOP_CREATEWINDOW 052042.197 DESKTOP_WRITEOBJECTS 052042.197 DESKTOP_SWITCHDESKTOP 052042.197 ALLOW SID NT AUTHORITY@ SYSTEM (S-1-5-18): 052042.197 AccessMask {0000 000 0 00001111 0000000111111111} is: 052042.197 STANDARD_RIGHTS_READ 052042.197 DESKTOP_ENUMERATE 052042.197 DESKTOP_READOBJECTS 052042.197 DESKTOP_CREATEMENU 052042.197 DESKTOP_CREATEWINDOW 052042.197 DESKTOP_HOOKCONTROL 052042.197 DESKTOP_JOURNALPLAYBACK 052042.197 DESKTOP_JOURNALRECORD 052042.197 DESKTOP_WRITEOBJECTS 052042.197 DESKTOP_SWITCHDESKTOP 052042.197 WRITE_DAC 052042.197 WRITE_OWNER 052042.197 DELETE 052042.197 ACL has 4 ACEs. 052042.197 Analyses performed by command parameters: 052042.197 all (i.e. full security context) 052042.197 7 options were analyzed. 052042.197 Exit from “eSecurity” after performing analysis.