Public folder permissions - messed up by IIS Lockdown tool

From: Brian Cohen (spam_at_spam.net)
Date: 02/17/04 

Date: Tue, 17 Feb 2004 16:02:46 -0500

I ran the latest version of the IIS Lockdown tool against my Exchange
server, and apparently the little bugger takes the liberty of modifying
permissions on the M: drive, something we've all been warned not to do.
  I found myself essentially locked out of all public folders at that point.

So I ran the lockdown tool again and undid all changes, but now the
permissions are screwed up on certain folders and attempting to modify
said permissions give an error regarding "Invalid Window Handle." So I
Googled around a bit and found many similar posts and references to a
few KB articles. One particular folder subtree is causing problems, so
I followed the instructions in:
http://support.microsoft.com/default.aspx?scid=kb;en-us;270905

which allowed me to set permissions. So I gave myself Owner client
permission on two folders in that subtree and attempted to move messages
between them but I get the error "You do not have sufficient permission
to perform this operation on this object ....".

I've ran the PFDavAdmin tool and fixed all folder DACL's, as well as
removed all Item-level permissions. The problem persists.

In addition, if I attempt to access the Security tab of any folder in
the M: drive (just for perusal, not for editing) using Windows Explorer,
I get a message telling me that "The permissions on <folder> are
incorrectly ordered, which may cause some entries to be ineffective.
Press OK to sort the permissions correctly, or Cancel to reset the
permissions."

What on EARTH is going on here?

Thanks,

-Brian

Relevant Pages

  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The fact that the tech support is based in India has nothing to do with the ... If so you may want to leave this folder alone. ... down to all children folders because i can set those permissions to ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The only computers i fix are my own. ... If so you may want to leave this folder alone. ... it includes all subdirectories with inherited permissions. ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • RE: no OWA
    ... have the correct permissions was the "inetpub" folder. ... Correct the settings in IIS: ... click to check the "Hide All Microsoft Services" ...
    (microsoft.public.windows.server.sbs)
  • Re: Word mail merge data source
    ... "Peter Jamieson" wrote: ... Word on it) then there may be a problem if the folder containing the data ... Word builds a connection string. ... superset of other users' permissions - for example, ...
    (microsoft.public.word.vba.general)
Loading