Re: Bypass Traverse Checking Issue

From: Andrew Mitchell (amitchel-addanotherL_at_casey.vic.gov.au)
Date: 02/15/04


Date: Sun, 15 Feb 2004 05:21:44 -0800


"Lee" <lmessenger@nospam.com> said

> hi,
>
> I am wondering if someone can clear up an issue.
>
> I have a Win 2003 file server, we have a shared folder that a user
> maps a drive to. In that folder is another folder, no-one apart from
> Admins have rights to this folder. Directories below this folder
> should be accessible to my users, permissions are setup etc etc.
>
> Now, as I understand it, if a user has the Bypass Traverse Checking
> right, they should be able to get to folders lower in the directory
> structure that they have rights to, even if they don't have rights to
> the top-level folder.
>
> However, in my case, a user receives "Access denied" when double
> cliking the top-level folder.
>
> In my DC Policy, Authenticated Users has the Bypass Traverse Checking
> right.
>
> So, I am lost, maybe I understand this wrong. could someone shed some
> light ?

My understanding of it is that if you have a directory called c:
\AdminsOnly that only the admins have permissions to and users have
Bypass Traverse Checking, and a subdirectory of c:\AdminsOnly\UsersAsWell
that the users have full permissions to then the users cannot browse to
the UsersAsWell folder by clicking c:\, then AdminsOnly then UsersAsWell
in explorer as they do not have permission to view directory listing in
the AdminsOnly folder.
The only way to get to the UsersAsWell folder would be to type 'c:
\AdminsOnly\UsersAsWell in the address bar of explorer, do a 'CD c:
\AdminsOnly\UsersAsWell' from a command prompt, or have a shortcut
directly to c:\AdminsOnly\UsersAsWell.
ie: Don't do anything that enters the AdminsOnly folder.

 --

Andy.



Relevant Pages

  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The fact that the tech support is based in India has nothing to do with the ... If so you may want to leave this folder alone. ... down to all children folders because i can set those permissions to ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The only computers i fix are my own. ... If so you may want to leave this folder alone. ... it includes all subdirectories with inherited permissions. ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • RE: no OWA
    ... have the correct permissions was the "inetpub" folder. ... Correct the settings in IIS: ... click to check the "Hide All Microsoft Services" ...
    (microsoft.public.windows.server.sbs)
  • Re: Word mail merge data source
    ... "Peter Jamieson" wrote: ... Word on it) then there may be a problem if the folder containing the data ... Word builds a connection string. ... superset of other users' permissions - for example, ...
    (microsoft.public.word.vba.general)

Loading