Re: Secure updates.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 03/13/04 

Date: Sat, 13 Mar 2004 07:54:06 -0700

Mike,
While off of the above thread is true, you do not need to
modifiy the ACL to accomplish the restriction you seem
interested in verifying.
When a client machine causes a record to be defined, it
becomes the owner/creator and through this has permissions
on the records it has defined, which same permissions are not
granted in general to other principals. This way, a machine is
not going to have its records pulled out from under it by some
other machine that is allowed to do dynamic updates to the zone. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"mike" <anonymous@discussions.microsoft.com> wrote in message
news:89CB682F-8049-4B19-A322-BFA1A80F8F09@microsoft.com...
> Thanks Kristin,
>
> Question answered.
>
> mike

Relevant Pages

  • Re: <authentication mode="Windows" /> Question
    ... Hi Mike ... permissions to the site virutal directory. ... confers no rights. ... I have set the virtual web authentication ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Files and Folder Permissions
    ... Without knowing exactly what you are trying to accomplish all I can say is - try the various settings until you get the combination that works for you. ... You may want to play with a test folder until you figure out what works. ... Finally would I need to select the Replace permissions entries on all child ... If the users are running programs like Office that create temp files ...
    (microsoft.public.windows.server.general)
  • Re: Modifying the Registry
    ... "Will Denny" wrote in message ... > Hi Mike ... > Permissions, other boxes unchecked ... > PC apart from this issue with Registry access. ...
    (microsoft.public.windowsxp.general)
  • Re: Strange Cron Issue
    ... My /etc/crontab is a carbon copy of yours, down to the permissions, so I ... have a hard time believing that's the issue. ... Mike ... > file there with a bad format (files should have the same format as the ...
    (Fedora)
  • Re: Desparately trying to enable Webserver write to file
    ... Thanks for the reply, Mike. ... that I made some sort of mistake. ... IIS will honor NTFS permissions and if IUSR account only has read ... >> think of to fix this problem but no luck. ...
    (microsoft.public.windows.server.general)