RE: CACLS error when revoking permissions

Hello Jim,

Thank you for using newsgroup!

Based on my research, this similar error may occur if a policy is in place
in the Windows 2003 Domain. The policy is set under Computer
Configuration\Windows Settings\Security Settings\Local Policies\Security
Options: Secure channel: Require strong (Windows 2000 or later) session key.

This value, RequireStrongKey can be viewed under the
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters
key in the Registry.

You may set this policy back to Not Defined to see if it can help.

In addition, please check the server to see if it generates the 13562 event
error. If so, Please check if the following registry key exists:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA - crashonauditfail
[ValueType=0] = 0x2

This is caused by not being able to write to the Security log. You can
change the value to '0' and reboot the machine to test the issue.

Hope that helps!

Thanks & Regards,

Ken Zhao

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.





--------------------
| Thread-Topic: CACLS error when revoking permissions
| thread-index: AcbhejWbA+RfKINmQ+qt3uPbOl6N1g==
| X-WBNR-Posting-Host: 35.8.133.110
| From: =?Utf-8?B?TlJDIEhlbHA=?= <NRC_Support@xxxxxxxxxxxxxxxx>
| Subject: CACLS error when revoking permissions
| Date: Tue, 26 Sep 2006 07:44:02 -0700
| Lines: 11
| Message-ID: <E933EC45-A81A-4236-9AC5-4235F67A4B4F@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.windows.file_system
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.file_system:9885
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.windows.file_system
|
| When using either cacls or xcacls to revoke permissions on a Windows 2003
| SP1, fully patched system I get an error stating "ERROR: The trust
| relationship between the primary domain and the trusted domain failed." I
am
| able to set permissions just fine using these utilities, but I can not
revoke
| permissions. Also, using the Windows Explorer GUI works as it should.
|
| Any ideas?
|
| TIA,
|
| Jim Willson
|

.

Relevant Pages

  • RE: What server hardening are you doing these days?
    ... permissions on their data, and Microsoft encourages ISVs to minimize ... I've been able to discuss ACLs and other security issues in Windows with ... Control or DAC (which is what you're referring to by the "stupid ...
    (Focus-Microsoft)
  • Re: Security Hole, Creator permission restriction ?
    ... Group Policy to "Disable Windows Explorer's default context menu". ... Configuration> Administrative Templates> Windows Components> Windows Explorer ... > We are having issues with users changing permissions on ... > I don't see a policy and I don't see a security setting. ...
    (microsoft.public.win2000.security)
  • Re: Unnown process... 5eplorer.exe
    ... do not remove the cause (a "super"-hidden .dll program) but only remove ... symptom files and registry settings. ... It has all permissions but 'copy' denied to everyone, ... then by using the Windows XP Recovery Console. ...
    (microsoft.public.win2000.general)
  • RE: dcom permissions and vista?
    ... user BLAH with Local Activation and Local Launch permissions. ... Windows Vista indeed do some changes in handling DCOM and you may need to ... Windows Vista introduces the notion of Mandatory Access Labels in security ... Microsoft Online Community Support ...
    (microsoft.public.vc.atl)
  • Re: OT: Win 7 comments
    ... I had to edit the Registry. ... This is right up there with repairing permissions, ... That's odd, consider how some of you guys bring the same habits to Windows, ... I will wait for some apps to crash. ...
    (comp.sys.mac.advocacy)