--- a/windows.rst Fri Jun 09 13:56:41 2017 +0300
+++ b/windows.rst Mon Jun 26 11:12:55 2017 +0300
@@ -437,28 +437,22 @@
http://support.microsoft.com/kb/253597
Automating Disk Cleanup Tool in Windows
-Schedule Tasks in Windows.
-==========================
+Schedule Tasks in Windows
+=========================
-List registered of task.
-------------------------
-::
+List registered of task::
$ schtasks /query
-Create task.
-------------
-::
+Create task::
$ schtasks /create /tn %TASK_NAME% /ru %ROOT% /sc daily /st 23:00:00 /tr "rundll32.exe user32.dll,LockWorkStation"
-/sc can be one of::
+``/sc`` can be one of::
MINUTE HOURLY DAILY WEEKLY MONTHLY ONCE ONSTART ONLOGON ONIDLE
-Delete task.
-------------
-::
+Delete task::
schtasks /delete /tn %TASK_NAME% /f
@@ -528,45 +522,72 @@
Well-known security identifiers (SID).
======================================
- S-1-0-0
- Null SID. A group with no members. This is often used when a SID
- value is not known.
- S-1-1-0
- World/Everyone. A group that includes all users.
- S-1-3-0
- Creator Owner ID. A security identifier to be replaced by the
- security identifier of the user who created a new object. This
- SID is used in inheritable ACEs.
- S-1-3-1
- Creator Group ID. A security identifier to be replaced by the
- primary-group SID of the user who created a new object. Use this
- SID in inheritable ACEs.
- S-1-5-6
- Service. A group that includes all security principals that have
- logged on as a service. Membership is controlled by the
- operating system.
- S-1-5-7
- Anonymous. A group that includes all users that have logged on
- anonymously. Membership is controlled by the operating system.
- S-1-5-32-544
- Administrators group.
- S-1-5-32-545
- Users group.
- S-1-5-32-546
- Guests. By default, the only member is the Guest account. The
- Guests group allows occasional or one-time users to log on with
- limited privileges to a computer's built-in Guest account.
- S-1-5-32-547
- Power Users. Power users can create local users and groups;
- modify and delete accounts that they have created; and remove
- users from the Power Users, Users, and Guests groups. Power
- users also can install programs; create, manage, and delete
- local printers; and create and delete file shares.
+Pring SIDs of groups::
+
+ cmd> whoami /groups
+
+Print current user SID::
+
+ cmd> whoami /user
+
+Get name from SID::
+
+ cmd> PsGetsid.exe S-1-0-0
+
+Get SID from name::
+
+ cmd> PsGetsid.exe "NT AUTHORITY\System"
+ cmd> PsGetsid.exe "NT AUTHORITY\LocalService"
+
+Well known users/groups:
+
+``S-1-0-0``
+ Null SID. A group with no members. This is often used when a SID
+ value is not known.
+``S-1-1-0``
+ World/Everyone. A group that includes all users.
+``S-1-3-0``
+ Creator Owner ID. A security identifier to be replaced by the
+ security identifier of the user who created a new object. This
+ SID is used in inheritable ACEs.
+``S-1-3-1``
+ Creator Group ID. A security identifier to be replaced by the
+ primary-group SID of the user who created a new object. Use this
+ SID in inheritable ACEs.
+``S-1-5-6``
+ Service. A group that includes all security principals that have
+ logged on as a service. Membership is controlled by the
+ operating system.
+``S-1-5-7``
+ Anonymous. A group that includes all users that have logged on
+ anonymously. Membership is controlled by the operating system.
+``S-1-5-18``
+ ``NT AUTHORITY\SYSTEM``
+``S-1-5-19``
+ ``NT AUTHORITY\LocalService``
+``S-1-5-32-544``
+ Administrators group.
+``S-1-5-32-545``
+ Users group.
+``S-1-5-32-546``
+ Guests. By default, the only member is the Guest account. The
+ Guests group allows occasional or one-time users to log on with
+ limited privileges to a computer's built-in Guest account.
+``S-1-5-32-547``
+ Power Users. Power users can create local users and groups;
+ modify and delete accounts that they have created; and remove
+ users from the Power Users, Users, and Guests groups. Power
+ users also can install programs; create, manage, and delete
+ local printers; and create and delete file shares.
+
+See:
https://msdn.microsoft.com/en-us/library/aa379649.aspx
Well-known SIDs
https://support.microsoft.com/en-us/help/243330/
Well-known security identifiers in Windows operating systems.
+https://msdn.microsoft.com/en-us/library/ms686005.aspx
+ Service User Accounts.
http://en.wikipedia.org/wiki/Security_Identifier
Security Identifier