WDevSec 1.2
There are many ways to customize security of non-volatile objects (files, folders, services, registry keys etc.
|
There are many ways to customize security of non-volatile objects (files, folders, services, registry keys etc.) on Windows systems. However when it comes to volatile Windows kernel objects which are created mainly by drivers and services (allowing them to be contacted via these objects) and recreated every time the creator driver/process starts the situation is much worse.
There are some GUI tools (e.g. WinObj and WinObjEx) which can change access permissions (DACLs) of these objects, but tools for automated securing of them seem to be pretty rare. This is what WDevSec does.
WDevSec is a command line utility able to view and change access permissions (DACLs) on Windows kernel objects. It can be used with Task Scheduler or Group Policy startup scripts to automate execution of it and set appropriate access permissions on every system startup.
WDevSec can process devices, named pipes, files, sections, events, mutants (mutexes), semaphores, timers, event pairs, I/O completion ports, registry keys, directory objects, folders, symbolic links and other objects (including LPC ports) with /A option.
WDevSec can also run in background and automatically set DACLs when it receives device change notification or on specified time intervals.
With WDevSec comes with another utility - WDevList. This utility can list Windows kernel objects and (optionally) execute WDevSec on them. WDevList can be used in situations where several objects with similar names exist and they all need to be secured. WDevList can also provide bare listing as output for processing by other programs (such as batch scripts).
WDevSec uses SDDL strings containing only DACL. All account names in these strings are automatically turned to SIDs.
WDevSec may be a great solution to customize access to some Windows features as well as to third party software components. Almost every software which provides some kind of services to other programs accepts communication via some Windows kernel objects. Drivers normally create device objects, user mode software usually uses named pipes (objects in \??\PIPE\ device), Windows components often uses LPC ports.
tags
kernel objects windows kernel access permissions can also lpc ports wdevlist can other programs some windows named pipes wdevsec can objects and these objects change access

Download WDevSec 1.2
Authors software
Similar software
WDevSec 1.2
Dâvis Moðenkovs
There are many ways to customize security of non-volatile objects (files, folders, services, registry keys etc.
AccessChk 1.03
Mark Russinovich
As a part of ensuring that they've created a secure environment Windows administrators often need to know what kind of accesses specific users or groups have to resources including files, directories, Registry keys, and Windows services.
Registry Trash Keys Finder 3.9.4.0
SNC
Registry Trash Keys Finder is a useful registry trash finder utility that will help you very much.
AccessEnum 1.32
Bryce Cogswell
While the flexible security model employed by Windows NT-based systems allows full control over security and file permissions, managing permissions so that users have appropriate access to files, directories and Registry keys can be difficult.
RegCool 3.106
Kurt Zimmermann
RegCool is a full-featured Registry editor and manager.
Registrar Lite 2.00
Resplendence Software
Registrar Lite is a powerful and flexible freeware registry editor.
MJ Registry Watcher 1.2.5.3
Mark Jacobs
MJ Registry Watcher is a simple system tray application that monitors for changes to any of the startup folders, startup registry keys, and any files you want alerting on.
RegistryErrorNuker 1.7
Advanced Systems
PC Error Nuker ! Repair Your PC Now.
Windows Registry Recovery 1.3.0.0
Mitec
Windows Registry Recovery is a free tool that allows you to read files containing Windows 9x,NT,2K,XP,2K3 registry hives.
Direct Registry Browser 1.0
SysDevSoftware Ltd.
Direct Registry Browser recover lost registry data (program settings, registration inforamtion, profile settings etc.
Other software in this category
Nullsoft Beep 0.3
Nullsoft, Inc
Nullsoft Beep is an application that makes your computer sound like computers sound in the movies.
AR Soft RAM Disk 1.20
AR Soft
The AR RAM Disk is a freeware driver for Windows NT or Windows 2000.
DBX Plugin for Windows Commander Beta
Labs99
DBX Plugin is an additional component for Windows Commander allowing you to read contents of Microsoft Outlook Express files.
4th split 1.1.9.0
Sergey S. Tkachenko
4th split is used for splitting impossibly large files on blocks.
HDCopy 2.104
Kurt Zimmermann
HDCopy is recommended to make a boot disk.