Re: Public folder permissions - messed up by IIS Lockdown tool

From: vagabond (adivvy_at_hotmail.com)
Date: 02/17/04


Date: Tue, 17 Feb 2004 21:48:01 -0000


>From memory the correct answer here is (unintuitively) OK and not Cancel (which buggers all permissions up, royally). What you do after that is anyone's guess.

hth (sorry, but it probably doesn't)

John

"Brian Cohen" <spam@spam.net> wrote in message news:DL-dnX5qYK7qHK_d4p2dnA@speakeasy.net...
> I ran the latest version of the IIS Lockdown tool against my Exchange
> server, and apparently the little bugger takes the liberty of modifying
> permissions on the M: drive, something we've all been warned not to do.
> I found myself essentially locked out of all public folders at that point.
>
> So I ran the lockdown tool again and undid all changes, but now the
> permissions are screwed up on certain folders and attempting to modify
> said permissions give an error regarding "Invalid Window Handle." So I
> Googled around a bit and found many similar posts and references to a
> few KB articles. One particular folder subtree is causing problems, so
> I followed the instructions in:
> http://support.microsoft.com/default.aspx?scid=kb;en-us;270905
>
> which allowed me to set permissions. So I gave myself Owner client
> permission on two folders in that subtree and attempted to move messages
> between them but I get the error "You do not have sufficient permission
> to perform this operation on this object ....".
>
> I've ran the PFDavAdmin tool and fixed all folder DACL's, as well as
> removed all Item-level permissions. The problem persists.
>
> In addition, if I attempt to access the Security tab of any folder in
> the M: drive (just for perusal, not for editing) using Windows Explorer,
> I get a message telling me that "The permissions on <folder> are
> incorrectly ordered, which may cause some entries to be ineffective.
> Press OK to sort the permissions correctly, or Cancel to reset the
> permissions."
>
> What on EARTH is going on here?
>
> Thanks,
>
> -Brian
>



Relevant Pages

  • Re: NTFS Security Question.
    ... A subordinate object DOES not inherit the PARENT perms (in ... will assume "Nebulous" permissions that refer to the LINK ... The trick is to PROPOGATE to all FILES (not Folders and Files - that would ... Since Windows 2000 deny NTFS permission does not work ...
    (microsoft.public.windowsxp.security_admin)
  • RE: ISA 2004 REPORT FAILURE
    ... Did as you suggested and turned auditing on for the system and folders ... that is setting the wrong permissions of the folders ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA 2004 REPORT FAILURE
    ... the ISA Reports still fail because ... I can change the permissions manually ... on the ISALogs and ISASummaries folders ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Personal Media Drive
    ... > much more knowledgeable about Windows than I am. ... You restrict access by assigning permissions to drives, folders and files. ...
    (microsoft.public.windows.mediacenter)
  • Re: Administrator/User security issues
    ... i have setup all the accounts, ... folders for testing the security. ... permissions but the admin. ...
    (microsoft.public.windowsxp.security_admin)