SetACL
https://helgeklein.com/setacl/
SetACL set audit file change
setacl.exe -on "C:\Program Files (x86)\nxlog\conf\nxlog.conf" -ot file -actn ace -ace "n:everyone;p:add_file,add_subdir,write_dacl;m:aud_succ;w:sacl"
SetACL WMI list rights
setacl.exe -on root -ot wmi -actn list -lst f:tab
SetACL WMI allow remote access
setacl.exe -on root -ot wmi -actn ace -ace "n:username;p:WBEM_METHOD_EXECUTE,WBEM_REMOTE_ACCESS,WBEM_ENABLE;m:set;w:dacl"
SetACL service list rights
setacl.exe -on LanmanServer -ot srv -actn list -lst f:tab
SetACL service read
setacl.exe -on servicename -ot srv -actn ace -ace `"n:username;p:read`"