Citrix MetaFrame Application for Windows 1.8 - Page 142

  0HWD)UDPH$GPLQLVWUDWRUªV*XLGH
If no arguments are specified, query acl checks all local drives and then checks
the HKEY_LOCAL_MACHINE portion of the system registry.
Any files or registry keys that non-administrator users can write to are reported in
the following format:
2%-(&7,1+(5,7$&&2817),/(
BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
':;32?(YHU\RQH&?$XWRH[HFEDW
;?(YHU\RQH&?ERRWLQL
':;32?(YHU\RQH&?&RQILJV\V
;;?(YHU\RQH&?:WVUY
Query acl also audits the MetaFrame execute list (created and maintained by the
Application Security utility) to verify that no executable files in the execute list are
writable by users.