Re: WHY???? Does no one respond to my questionsss?? :-)

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Tony Su (anonymous_at_discussions.microsoft.com)
Date: 07/04/04 

Date: Sat, 3 Jul 2004 20:49:50 -0700

Am I missing something?
I am surprised that this issue should be an unexpected
issue to so many people...

Every person should know the difference between Share
permissions and File permisssions.

And, if you migrate a User profile to a new Domain, the
new SID <must> be different than the old because the
Domain is completely different.

For the newbies, the SID is the underlying number Windows
uses to identify objects in a security context, <not> the
human-friendly labels you use. So, although the file(s)
might appear to be exactly the same in the old and new
Windows Domains, computers will see them as completely
different.

<That> is why you have to take ownership of the entire
file structure and re-configure security in the new Domain.

And, if you restore files from a previous installation (or
another Domain) this explanation should answer that
scenario also.

Tony Su

>-----Original Message-----
>Assuming you have a drive or folder heirarchy where you
want your security
>group to have the same permissions for all objects,
rather than something
>more customized: At the top level of the drive or folder
tree, set the
>security permissions you want everyone to have. Click
Advanced. In the
>Advanced window, make sure that in addition to the
permissions being
>correct, the "Apply to" settings are right too. Then
click the option to
>"Replace permission entries on all child objects...."
>
>Depending on the size of the drive or folder on which you
do this, don't be
>surprised if it takes a long time for all the permissions
to be applied.
>
>"JC Harris" <master2661@yahoo.com> wrote in message
>news:%23dXCBdFYEHA.3476@tk2msftngp13.phx.gbl...
>>I have asked about ten questions in here and RARELY get
a response. Hard to
>> believe I am actually stumping the
experts...anyway...lets try again?
>>
>> I am having some major headaches with permissions once
the upgrade from
>> SBS2K to SBS2K3 was completed. We have a seperate HD
that house only
>> statistical data and is only accessible by a few staff
members. Once the
>> upgrade was complete I had to "reshare" the drive (the
orginal share got
>> locked out for "administrative purposes") and I gave
the 4 staff members
>> Shared Permisions. Now some of the files will open, but
on others we get
>> the
>> permision denied error. It looks to be a problem with
the parent-child
>> relationship on the drive permissions but it all looks
to be set
>> correctly,
>> and what is frustrating is that some of the files and
folders open without
>> a
>> problem.
>>
>> I have even set up a Security group with them all in it
and gave them full
>> control, but the error still appears. I can go to each
individual file and
>> set the permisions and then it works fine, but this
obviously is not the
>> best solution. I also noticed the same thing happening
on SOME files that
>> we
>> retrieved from backup tapes on SBS2K.
>>
>> Anyone have any ideas??
>>
>> --
>> John C. Harris, MPA
>> Phone: 813-681-3344
>>
>>
>
>
>.
>

Relevant Pages

  • C:System Volume Information - Left-Click denied, yet Right-Click works - Retaken Own
    ... | with permissions granting you Full Control? ... To take ownership of the System Volume Information folder: http://support.microsoft.com/kb/308421 ... the only SID which has any access to the folder is NTAUTHORIT/SYSTEM (i.e. Windows XP) ... My "Security" Suite reports: ...
    (microsoft.public.windowsxp.general)
  • Re: Too late for Administrators Password?
    ... if you're going to be messing with permissions then ALWAYS FIRST SET ... folder and click the Security Options folder. ... Next, administrator, you need to have the security tab show when you ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Default everyone group
    ... The everyone full access should only be on the root folder. ... I always change the ntfs permissions on my root folders to ... tightening up security in this regard. ... computers running Windows XP Professional and members of the Windows .NET ...
    (microsoft.public.win2000.security)
  • Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
    ... In order for Alice to Take Ownership of Bob's private folder she would ... Owner and now Bob no longer has the ability to set permissions on it. ... And Windows does have a umask-like function. ... This article contains a set of attack scenarios to demonstrate security ...
    (Full-Disclosure)
  • Re: Software and Desktop Restrictions
    ... Then you need to investigate file and folder security. ... In Windows Explorer, go to Tools, Folder Options, View and uncheck ... Here you can assign or deny permissions based on user name or user ...
    (microsoft.public.windowsxp.security_admin)