Rebuild AdminSDHolder

[ELBeast]

Okay long story short, I had a stupid moment and I hit Default security button under the Advanced Security Setting dialog box. I was able to rebuild the default permissions by using a mix of internal documentation and Microsoft's.

http://technet.microsoft.com/en-us/library/cc772684(WS.10).aspx

(Default Settings in the Master Security Descriptor of the AdminSDHolder Object)

The only thing left outstanding is setting the
All Validated Writes and All Extended Rights.
If I grant the Admin accounts Full control it does what I need it to do, however I'd like to set it back to how it was before w/o relying on the Full Control catch-all.

I had to set most of my DSCALS via VB scripts that worked great, I just don't want to have to re-add all of the Validated Writes and Extended Rights individually. There must be a "master/blanket" GUID or something I could use that will do what I want it to do.

Any ideas?

 

[TechyMcSe2k]

Depending on your company/network size; I probably would have sugggested an authoritative restore.

_______________________________________
Great knowledge can be obtained by mastering the Google algorithm.

 

[ELBeast]

Yeah; I know I can do that, but really that's unnecessary at this stage since I've pretty much rebuild the thing from scratch. If I need to redo each one, then I'll do it. However there must be a better way.