Re: AD DC and File Permissions

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Tim Hines [MSFT] (timhines_at_online.microsoft.com)
Date: 06/22/04 

Date: Tue, 22 Jun 2004 14:16:29 -0400

The Group policy setting for file and folder security is found under
\computer configuration\windows settings\security settings\file system. You
will see files and folder listed in the right pane if security has been
configured for files or folders. Check this location in each GPO that
applies to the DCs. 

-- 
Tim Hines, MCSE, MCSA
 Windows 2000 Directory Services
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
"Yor Suiris" <yor@hallgroupNOT.net> wrote in message
news:OFqynxHVEHA.3380@TK2MSFTNGP11.phx.gbl...
> And how do I tell if there has been a policy set or used to change folder
> permissions. In AD I show the Default policy where I can set things like
> password requirements and deny or allow log on, services, etc,. But there
is
> NIL about file permissions there. Like you suggest that it would cause a
> performance problem, so then, where do I check if a policy is in effect on
> file permission?
>
>
>
> "Tim Hines [MSFT]" <timhines@online.microsoft.com> wrote in message
> news:eNAV84%23UEHA.2692@TK2MSFTNGP09.phx.gbl...
> > File permissions can be set by using group policies but policies are not
> > responsible for the permissions on the ntfrs folder.   The default
> > permissions on most folders come from security templates such as "setup
> > security.inf" or rootsec.inf.    It is recommended that you do not apply
a
> > policy that changes permissions to the domain controllers OU.  The
policy
> is
> > refreshed every five minutes on a DC and if it re-acls the files and
> folder
> > every five minutes you may experience performance issues.
> >
> >
> > -- 
> > Tim Hines, MCSE, MCSA
> >  Windows 2000 Directory Services
> >
> > =====================================================
> > When responding to posts, please "Reply to Group" via
> > your newsreader so that others may learn and benefit
> > from your issue.
> > =====================================================
> > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >
> >
> > "Yor Suiris" <yor@hallgroupNOT.net> wrote in message
> > news:OHrsz#vUEHA.3944@tk2msftngp13.phx.gbl...
> > > I appear to have a conflict in my AD with regrads to file permissions
on
> > my
> > > DCs.
> > > Specificly the winnt\ntfrs folder.
> > > Could someone maybe explain where these permissions are generated.
Such
> as
> > > are they set on each server seperatly or are they contained in a
Global
> > > Policy?
> > >
> > > -- 
> > > Yor Suiris
> > > Remove the kNOT to reply.
> > > But it is best to share it with the group.
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: Too late for Administrators Password?
    ... if you're going to be messing with permissions then ALWAYS FIRST SET ... folder and click the Security Options folder. ... Next, administrator, you need to have the security tab show when you ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Trouble with Win2003 Folder Redirection Policy
    ... giving NTFS permissions to that group. ... From what information you've given me the policy is correct as long as ... The user's home folder in the profile section of the AD has been ... updated to the new server as well. ...
    (microsoft.public.windows.server.general)
  • Re: Still Read-only
    ... >That is how XP and W2k3 are. ... >read-only attribute of the folder. ... >and file permissions are different things. ... Security) ...
    (microsoft.public.windowsxp.security_admin)
  • Re: recurring 1058/1030 USERENV events every 5 mins
    ... This posting is provided "AS IS" with no warranties, ... The policy causing the 1058 messages ... permissions either so surely if this was the issue the messages ... Root folder is the highest folder so "windows" ...
    (microsoft.public.windows.server.general)
  • Re: XP File and printer sharing SOLVED!! A HIDDEN FIREWALL!!
    ... Then click a shared folder to open it. ... problem is probably caused by share permissions or NTFS file system ... I decided that it /had/ to be a firewall problem. ... I hadn't used any Symantec security software ...
    (microsoft.public.windowsxp.network_web)