Re: File permission propagation



Chris Hills wrote:
Hi

I have a situation in which folders in a tree have supposedly inherited
certain permissions which they should not have. The structure looks like
this:-

C:\
Disks\
D1300\
Disk 2\
Partition 2\ [M]
u12345\

[M] = mounted partition

On the folder u12345\ the following permissions show (Name,Inherited From):-

Administrators,Parent Object
SYSTEM,C:\Disks\D1300\Disk 2\Partition 2\
Joe Bloggs,C:\Disks\D1300\Disk 2\Partition 2\
CREATOR OWNER,Parent Object
Users,Parent Object

On the folder Partition 2\ the following permissions show
(Name,Inherited From):-

CREATOR OWNER,<not inherited>
Domain Admins,<not inherited>
DOM-LS-Group1,<not inherited>
SYSTEM,<not inherited>

On the folder Partition 2\ I have made sure that "Allow inheritable
permissions from the parent..." is unselected.

The folders underneath Partition 2\ are set as home folders on the
domain and are automatically created. I would like to find out where the
"Users" permission on these folders is being inherited from because as
far as I can tell it should not be there.

After looking around, I found out that the partition itself had its own
set of security permissions, which are not the same as those shown on
the folder at the mount point. However, in addition to the "Users"
entry, there was also an entry for "Everyone", but that did not show up
on the folder u12345\. How bizarre. I removed the permission for "Users"
from the partition and I observed that it was no longer inherited.
.



Relevant Pages

  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The fact that the tech support is based in India has nothing to do with the ... If so you may want to leave this folder alone. ... down to all children folders because i can set those permissions to ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The only computers i fix are my own. ... If so you may want to leave this folder alone. ... it includes all subdirectories with inherited permissions. ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: SBS folder problem
    ... So eventually got around to wiping the partition and reinstalling ... Only the all users folder is affected the othe folders have been removed. ... Once you've taken ownership then you can reset permissions properly. ... There is a known issue with trying to install SP2 if there are a large number of other updates installed ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS folder problem
    ... I don't think I'd be comfortable using an install CD from another OS just to fix partitions. ... #1 deleting the partition, the next partition became the primary boot partition, when recreating a new one it never became C: ... Only the all users folder is affected the othe folders have been removed. ... Once you've taken ownership then you can reset permissions properly. ...
    (microsoft.public.windows.server.sbs)