Security Question.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: "Wiley Coyote - N2K" <mits_mvp@xxxxxxxx>
Date: Mon, 21 Aug 2006 14:08:09 -0600

I have set NTFS perms on the Root of my system volume to EVERYONE: Deny
Write. Yet, I can still create folders and files! I've been an SE for a
longggg time and never saw this before.

This acount that I am using is NOT a member of any supernumery group, just
a plain jane user account. I logged in with admin rights to check the NTFS
perms and all seems to be OK as follows:

System: CHANGE (not FC),
Everyone Read & Exec, List, Read ((Deny Write),
C.O. : nada,
Administrators: Change,
Users: Read & Exec, List, Read (Deny Write)

One of the reasons for this level of security is to prevent certain web
sites from dropping VB apps in the root and other silly things.

Anyway, just curious.

If anyone know what is happending that would be good.

Thanks.

.

Follow-Ups:
- Re: Security Question. - FEXED, the Security NG helped.
  - From: Wiley Coyote - N2K

Prev by Date: Re: How to boot from other hard drive
Next by Date: Time limitations in a file
Previous by thread: Insufficient system resources ?
Next by thread: Re: Security Question. - FEXED, the Security NG helped.
Index(es):
- Date
- Thread

Relevant Pages

NTFS Security Question.
... I have set NTFS perms on the Root of my system volume to EVERYONE: Deny ...
(microsoft.public.windowsxp.security_admin)
AW: UsersDeny except root@myserver
... (using Deny first then Allow same as Allow first then Deny) ... We decided not to use Allow/Deny USers and just limt root ... HEX reserves the right to monitor all e-mail communications through its networks. ...
(SSH)
Re: Security Question. - FEXED, the Security NG helped.
... This acount that I am using is NOT a member of any supernumery group, ... just a plain jane user account. ... Everyone Read & Exec, List, Read ((Deny Write), ...
(microsoft.public.windowsxp.general)
Re: Does Microsoft lie about the Linux features?
... >> One way would be for root to take ownership. ... > If no delete privs exist, how would the backup account clean out the old ... Deny rights take precedence over Allow rights. ...
(comp.os.linux.misc)
Re: Does Microsoft lie about the Linux features?
... >> One way would be for root to take ownership. ... > If no delete privs exist, how would the backup account clean out the old ... Deny rights take precedence over Allow rights. ...
(comp.os.linux.hardware)