Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to set the backup intent flag when getting ACL over file share. #87

Open
smolattack opened this issue Oct 21, 2023 · 0 comments
Open

Comments

@smolattack
Copy link

smolattack commented Oct 21, 2023

I would like to run Get-NTFSAccess on a remote file and bypass the file's NTFS DACL.
Using an elevated terminal with an account that is in the Backup Operators local group, I can use Get-NTFSAccess on files that I have no effective permissions.

I want to do the same on files stored on a remote server accessed through a file share. The two computers are on the same domain and my user account is a member of the Backup Operators local groups on both computers.

My understanding is that the SeBackupPrivilege is not enabled on the hosting computer unless the FILE_OPEN_FOR_BACKUP_INTENT flag is set in the SMB request.
https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-smb2/e8fb45c1-a03d-44ca-b7ae-47385cfd7997

Has anyone successfully managed to set this flag and get Get-NTFSAccess to work in the aforementioned scenario?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant