Re: AD DC and File Permissions

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Yor Suiris (yor_at_hallgroupNOT.net)
Date: 06/17/04 

Date: Thu, 17 Jun 2004 11:04:20 -0400

And how do I tell if there has been a policy set or used to change folder
permissions. In AD I show the Default policy where I can set things like
password requirements and deny or allow log on, services, etc,. But there is
NIL about file permissions there. Like you suggest that it would cause a
performance problem, so then, where do I check if a policy is in effect on
file permission?

"Tim Hines [MSFT]" <timhines@online.microsoft.com> wrote in message
news:eNAV84%23UEHA.2692@TK2MSFTNGP09.phx.gbl...
> File permissions can be set by using group policies but policies are not
> responsible for the permissions on the ntfrs folder. The default
> permissions on most folders come from security templates such as "setup
> security.inf" or rootsec.inf. It is recommended that you do not apply a
> policy that changes permissions to the domain controllers OU. The policy
is
> refreshed every five minutes on a DC and if it re-acls the files and
folder
> every five minutes you may experience performance issues.
>
>
> --
> Tim Hines, MCSE, MCSA
> Windows 2000 Directory Services
>
> =====================================================
> When responding to posts, please "Reply to Group" via
> your newsreader so that others may learn and benefit
> from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> "Yor Suiris" <yor@hallgroupNOT.net> wrote in message
> news:OHrsz#vUEHA.3944@tk2msftngp13.phx.gbl...
> > I appear to have a conflict in my AD with regrads to file permissions on
> my
> > DCs.
> > Specificly the winnt\ntfrs folder.
> > Could someone maybe explain where these permissions are generated. Such
as
> > are they set on each server seperatly or are they contained in a Global
> > Policy?
> >
> > --
> > Yor Suiris
> > Remove the kNOT to reply.
> > But it is best to share it with the group.
> >
> >
>
>

Relevant Pages

  • Re: recurring 1058/1030 USERENV events every 5 mins
    ... This posting is provided "AS IS" with no warranties, ... The policy causing the 1058 messages ... permissions either so surely if this was the issue the messages ... Root folder is the highest folder so "windows" ...
    (microsoft.public.windows.server.general)
  • Re: recurring 1058/1030 USERENV events every 5 mins
    ... permissions either so surely if this was the issue the messages would ... Root folder is the highest folder so "windows" ... Default Domain Policy and is one i have customised over time. ... Also one of the articles mentions permissions for the "everyone" ...
    (microsoft.public.windows.server.general)
  • Re: [RFC][PATCH] Privilege dropping security module
    ... dpriv.c contains the struct security_operations hooks for dpriv. ... You're masking file permissions. ... And stick with your namespace, ... * Parse policy lines one at a time. ...
    (Linux-Kernel)
  • Re: AD DC and File Permissions
    ... The Group policy setting for file and folder security is found under ... > NIL about file permissions there. ...
    (microsoft.public.win2000.active_directory)
  • [RFC][PATCH] Privilege dropping security module
    ... dpriv.c contains the struct security_operations hooks for dpriv. ... * under the terms of the GNU General Public License as published by the Free ... * Parse policy lines one at a time. ... * Open file descriptors and their implied permissions based on @policy ...
    (Linux-Kernel)