Re: permissions inheritance problem



Answered it myself.
http://support.microsoft.com/default.aspx?scid=kb;en-us;310316 contains an
explanation which solves my specific problem, but my tests showed that it's
not always accurate.
"Jay" <j@xxxxx> wrote in message
news:u1F6dZLlIHA.2368@xxxxxxxxxxxxxxxxxxxxxxx

I have a folder containing several thousand files. Its Security
configuration is set to 'Allow inheritable permissions from parent to
propagate to this object and all child objects', and in fact all its
Permissions boxes are greyed out because it's inheriting them from its
(great-grand) parent. Most of the files created in this folder therefore
inherit permissions properly, but there are a tiny number that don't and
are causing me grief. In these cases, what happens is that the user copies
a file out from this folder to a temp folder on the desktop of the same
computer to do some work on it. By being placed in a folder on the desktop,
the file's Security settings are correctly changed to those inherited from
the Desktop because its 'Allow inheritable permissions' box is still set
on. The problem occurs when the file is then moved or copied from the
desktop back into the original folder either by dragging and dropping in
Windows Explorer or by using 'copy' or 'move' from the command line, when
its 'Allow inheritable permissions' box is set off and it then exists with
an incomplete set of access permissions.

Can anybody explain why the file should lose its 'Allow inheritable
permissions' setting like this? My understanding was that If 'Allow
inheritable permissions' is set on for a folder, then any child object
created in that folder defaults to inheriting its permissions unless the
flag is specifically overridden and set off for an object, but that's
obviously and demonstrably incorrect.

Jacques



.



Relevant Pages

  • RE: Turning off inheriting permissions
    ... > by unchecking "Allow inheritable permissions from the parent to propagate ... > to this object and all child objects. ... I am trying to lock down a folder on a shared drive ... > Damian N. Leibaschoff, MS IST, MCSE ...
    (microsoft.public.windows.server.sbs)
  • Deleting Files.... Acess Denied
    ... to remove the old folder and re-install it. ... enabled/checked "Allow inheritable permissions from parent to ... A Security box advised about propagation of ... inheritable permissions to child objects. ...
    (microsoft.public.win2000.security)
  • permissions inheritance problem
    ... I have a folder containing several thousand files. ... configuration is set to 'Allow inheritable permissions from parent to ... propagate to this object and all child objects', ... the Desktop because its 'Allow inheritable permissions' box is still set on. ...
    (microsoft.public.windows.server.general)
  • Re: GPO Management Delegation
    ... folder do not inherit down to child objects under the Policies ... Does anyone know if "Allow inheritable permissions to ... Is it set to just the parent or child objects as well? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Win NT Permission question ?
    ... inheriting permissions but the files in the folder are ... In your explaination you do mention that user3 can ...
    (Security-Basics)