Re: Inherit Permissions problems on a Windows 2003 cluster

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Glenn L (the.only(delete)_at_gmail)
Date: 02/21/05 

Date: Sun, 20 Feb 2005 21:46:23 -0800

What you are experiencing is the heart of the principle of permissions
inheritance.
When you check the box on a folder to inherit permissions from its parent,
it does just that.
If everyone has full control of the parent directory, it now has full
control of the child directory by virtue of the inheritance flag. This is
the design. This happens on any NTFS formated volume.
If you do not want the everyone group to have access to this folder, then
uncheck the inheritance flag and select the (remove) option when prompted.

Also, there is no such thing as inherit from parent on a root folder. The
root folder is the top of the tree and cannot have a parent. This is why it
is not an option. 

-- 
Glenn L
CCNA, MCSE 2000/2003 + Security
"Sabo, Eric" <sabo_e@cup.edu> wrote in message 
news:%23RzJMSjFFHA.2572@tk2msftngp13.phx.gbl...
>I am trying to use inherit permissions on a Windows 2003 Ent cluster.
>
> Here is what is happening:
> I have a drive Y: - which is a cluster resource and NTFS formated
>
> root of  Y:  (Everyone - FC) - inherit is not check at this level
>
> Y:\somedirectory - at this level I want domain admins to have FC but 
> everytime I hit the inherit check box it is putting in the "EVERYONE" 
> group but at the root level I don't have this check - in fact it is not 
> even an option at that level.
>
> I don't know why this is happening.   Because the drive is on a cluster 
> resource does this make a difference.
>
> Any help would be appreciated.
>
>
>
>

Relevant Pages

  • Re: How can I control folder permissions when creating a folder
    ... I'm not an ACL expert, but I believe the inheritance flag is set on the child, not the parent. ... >Subject: Re: How can I control folder permissions when creating a folder ... >set "inherit from parent" right after I create the folder. ...
    (microsoft.public.dotnet.security)
  • Re: Secure file and folder permissions
    ... the checkbox for "Inherit from parent ... problem stems from the fact that he starts at the root of drive ... parent to inherit permissions from. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Folder permissions - deny users, allow administrator
    ... and nothing else and nothing inherited from parent of Completed. ... With those permissions there will be no explict permissions on ... then an Administrator moves it to "completed", the folder retains the full ... the parent of Working and Completed does not inherit from ...
    (microsoft.public.security)
  • inherit NTFS permissions
    ... I have an issue with NTFS permissions on a W2K box. ... I unchecked the box "Allow inheritable permissions from parent to ... propagate to this object" for the Folder "Folder 1" since I want this ... folder to not inherit the permission settings from root. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: User Folders created by the system
    ... Win2k3 is to inherit parent permissions. ... 'Parent Folder' NTFS Permissions ...
    (microsoft.public.windows.server.security)