{"id":34668,"date":"2024-08-03T00:03:57","date_gmt":"2024-08-02T22:03:57","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=34668"},"modified":"2024-07-27T11:15:07","modified_gmt":"2024-07-27T09:15:07","slug":"active-directory-tool-ldp-has-a-built-in-sddl-editor-and-text-exporter","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2024\/08\/03\/active-directory-tool-ldp-has-a-built-in-sddl-editor-and-text-exporter\/","title":{"rendered":"Active Directory tool LDP has a built-in SDDL editor and text exporter"},"content":{"rendered":"

\"Windows\"[German<\/a>]I'm putting a topic for administrators in the blog – it may be widely known. I myself am not so well versed in the AD area and the available tools. In Windows, there is the LPD.exe tool, which contains both an SDDL editor and an SDDL-to-text converter. If you are not yet familiar with it, it may be of interest. Here is some background information on this topic, which I came across some time ago.<\/p>\n

<\/p>\n

What ist LDP?<\/h2>\n

\"\"Ldp is a Windows Explorer-like tool based on a graphical user interface (GUI), which is used for navigation in the Active Directory (AD). In the left-hand column of the tool, you can navigate through the Active Directory namespace, while the results of the LDAP operations are displayed in the right-hand detail area. Any text displayed in the detail area can be selected with the mouse and copied to the clipboard.<\/p>\n

ldp.exe kann zum Beispiel zum Suchen von LDAP-Server verwendet werden, wie Cisco hier beschreibt<\/a>. Eine weitere Beschreibung zur AD-Verwaltung mit LDP findet sich hier<\/a>.<\/p>\n

Ldp can be used to search for LDAP servers, for example, as Cisco describes here<\/a>. Microsoft provides some information on ldp.exe in this support document<\/a> – and this document<\/a> from Microsoft employees shows how to activate statistics in LDP.<\/p>\n

Security Descriptor Definition Language (SDDL)<\/h2>\n

SSDL stands for Security Descriptor Definition Language. The Security Descriptor Definition Language (SDDL) is used<\/a> to represent security descriptors. The security for device objects can be specified by an SDDL string that is placed in an INF file or transferred to IoCreateDeviceSecure.<\/p>\n

SSDL steht f\u00fcr Security Descriptor Definition Language. Die Security Descriptor Definition Language (SDDL) wird verwendet<\/a>, um Sicherheitsdeskriptoren darzustellen. Die Sicherheit f\u00fcr Ger\u00e4teobjekte kann durch eine SDDL-Zeichenfolge angegeben werden, die in einer INF-Datei platziert oder an IoCreateDeviceSecure<\/em> \u00fcbergeben wird.<\/p>\n

LDP.exe with SDDL editor and text exporter<\/h2>\n

I came across this topic on X via the following tweet<\/a> from Sam Erde. He asks: Did you know that the good old LDP.EXE has a built-in SDDL editor and a tool for converting SDDL to text?<\/p>\n

\"LDP.exe<\/a><\/p>\n

In PowerShell there is also the ConvertFrom-SddlString<\/a> utility, which can be used for conversion. I have no idea whether all this is known and used. However, I'll post this find splitter here in the blog, maybe an administrator can take advantage of it.<\/p>\n","protected":false},"excerpt":{"rendered":"

[German]I'm putting a topic for administrators in the blog – it may be widely known. I myself am not so well versed in the AD area and the available tools. In Windows, there is the LPD.exe tool, which contains both … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[194],"class_list":["post-34668","post","type-post","status-publish","format-standard","hentry","category-windows","tag-windows"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/34668","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=34668"}],"version-history":[{"count":3,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/34668\/revisions"}],"predecessor-version":[{"id":34671,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/34668\/revisions\/34671"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=34668"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=34668"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=34668"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}