Re: Global application settings for restricted users

Steven:

The problem with manipulating NTFS permissions at the time of installation
is that the application cannot thereafter recover from a corrupted or
deleted xml config file on its own.

I am afraid some wise guy will decide its fun to try and change app settings
by directly editing the xml file at some point. As it stands right now, I
have xml validation checks each time the file is opened and if it is found
missing, it will be re-created with default values.

So, I would like the program to be able to write and modify the file,
regardless of what permissions the user has.

Thanks,

Dennis

"Steven Cheng[MSFT]" <v-schang@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:iqwTOiXdFHA.940@xxxxxxxxxxxxxxxxxxxxxxxx
> Hi Dennis,
>
> I also think using the NTFS's access control list to protect your
> application's global configuration files is the proper approach. And as
> for
> how to manipulate the NTFS permissions for file system, we can use the
> buildin interfaces in the windows installer( can use in our install
> project) or using script to manipulate the NTFS permissions. Here are some
> certain reference on the related infos:
>
> #How To Set Permissions Using the LockPermissions Table
> http://support.microsoft.com/?id=288975
>
> #How to use Xcacls.vbs to modify NTFS permissions
> http://support.microsoft.com/?id=825751
>
> Hope helps. Thanks,
>
>
> Steven Cheng
> Microsoft Online Support
>
> Get Secure! www.microsoft.com/security
> (This posting is provided "AS IS", with no warranties, and confers no
> rights.)
>


.

Relevant Pages

  • Re: Block AOL Inst. Messenger???
    ... and usb ports are disabled in cmos if they are not needed. ... >> installed The other main thing to do is to tighten up ntfs permissions. ... First on the root folder of each ... >> installation ntfs permissions should be fine along with the the windows ...
    (microsoft.public.win2000.security)
  • Re: Block AOL Inst. Messenger???
    ... > administrator access. ... > installed The other main thing to do is to tighten up ntfs permissions. ... First on the root folder of each ... > Other folders added to the root folder since installation should probably ...
    (microsoft.public.win2000.security)
  • Re: Global application settings for restricted users
    ... application's global configuration files is the proper approach. ... buildin interfaces in the windows installer(can use in our install ... project) or using script to manipulate the NTFS permissions. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Strange folders
    ... > in my WinNT/temp folder. ... > installation) to Win2000, ... Check NTFS permissions on your profile directories. ...
    (microsoft.public.security)
  • Re: BIG problem with registry
    ... it is likely due to NTFS permissions. ... Microsoft MVP (Windows Server System: ... So, I had a big problem with the registry and, making ... > second installation of windows hoping to save my data: ...
    (microsoft.public.windowsxp.security_admin)