Re: Bug oder feature? NTFS Rechte

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Klaus Schmidt (klaus_at_discussions.microsoft.com)
Date: 08/07/04

  • Next message: Volker Laures-Hennes: "Re: MediaPlayer" 
    Date: Fri, 6 Aug 2004 23:11:17 -0700

    Mensch Thorsten, Du hast ja recht...

    Ich habe aber alles doppelt getestet und eine fehlerhafte
    Konfiguration nicht finden können.
    Ich habe hier 4 W2K Terminalserver laufen im WLBS und
    etliche zusätzliche als Testmaschinen. Überall übernimmt
    das System die Rechte so. Nur auf den beiden W2k3-Servern
    nicht. Installiere ich jedoch in den c:\ Pfad, oder in
    eine andere/neue Ordnerstruktur, funktioniert alles
    hervorragend. Ich vermute also, das hier eine Funktion vom
    BS eingestellt ist, die ich und vielleicht auch DU nicht
    kennen.
    Ach so, es sind übrigens W2K3-Enterprise, die ich über den
    Sessionmanager laufen lassen will. Vielleicht hast Du ja
    bei der Version mal was von einer Solchen
    Sicherheitsimplementierung gehört.

    Grüse aus dem Norden

    Klaus

    >-----Originalnachricht-----
    >"Klaus Schmidt" schrieb:
    >
    >Hallo Klaus,
    >
    >sorry, jetzt phantasierst Du aber: F1 is the key. Es
    passiert nix
    >anderes, als dass das Laufzeitverhalten von NT4TSE
    aktiviert wird, also
    >"globaler Vollzugriff":
    >
    >"In Relaxed Security mode, the security descriptor
    (TERMINAL SERVER
    >USER) is added to each member of the Users group. On
    Windows NT 4.0,
    >when a user's permissions are evaluated to determine
    access to a file or
    >registry entry, the presence of the security descriptor
    authorizes
    >access. This application of the security descriptor
    allows members of
    >the Users group to run programs that otherwise might not
    work at all in
    >the more rigorous Full Security permissions mode used on
    Windows 2000
    >and Windows Server 2003 family operating systems.
    However, when you
    >choose Relaxed Security mode, any user on the system can
    change files
    >and registry settings in many places throughout the
    system, although
    >others users' data files may not be visible. A malicious
    user could
    >exploit this situation by replacing a known and trusted
    program with a
    >program of the same name but some bad intent."
    >
    >Das hat also mit Deinem Kernproblem AFAIK nicht viel zu
    tun.
    >
    >Grüße
    >__________________________________________________________
    _______
    >Thorsten Rood (Antworten bitte nur per NG)
    >MCSE-M/-S, CCEA, MVP Terminalservices
    >Beiträge in Peer-Newsgruppen begründen keinerlei
    Rechtsansprüche.
    >.
    >

  • Next message: Volker Laures-Hennes: "Re: MediaPlayer"

    Relevant Pages

    • [NT] Cumulative Security Update for Internet Explorer (MS04-025)
      ... Get your security news from a reliable source. ... * Microsoft Windows NT Workstation 4.0 Service Pack 6a ... Navigation Method Cross-Domain Vulnerability ...
      (Securiteam)
    • [NT] Vulnerability in HTML Help Allows Code Execution (MS05-001)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... * Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service ...
      (Securiteam)
    • Re: The Myth of the secure Mac
      ... OEM Windows XP Home goes for a bit under $100. ... >> secure than Home. ... Though this really has nothing to do with security. ... Microsoft counts on third-party developers to provide more ...
      (comp.sys.mac.advocacy)
    • SecurityFocus Microsoft Newsletter #120
      ... Strengthening Network Security: FREE Guide Network security is a ... MICROSOFT VULNERABILITY SUMMARY ... Microsoft Windows File Protection Signed File Replacement... ... PlatinumFTPServer Information Disclosure Vulnerability ...
      (Focus-Microsoft)
    • SecurityFocus Microsoft Newsletter # 149
      ... MICROSOFT VULNERABILITY SUMMARY ... EveryBuddy Long Message Denial Of Service Vulnerability ... Intellitactics Network Security Manager ... Windows operating systems. ...
      (Focus-Microsoft)