"Broken"/unknown ACL's?

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
"Broken"/unknown ACL's? Maury Markowitz 11-22-2005
Posted by =?Utf-8?B?TWF1cnkgTWFya293aXR6 on November 22, 2005, 5:50 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I have been tracking down a problem for a few days now, and I finally
understand what's going on...

On one machine in our office running NT4, any attempt to add ACLs for any
reason fails. The user/group/etc. can be added as you would expect -- you
select the user/group/etc from the "pick list" for the domain, and then click
Add, at which point it appears in the ACL list. However when you immediately
open the list again, that entry has been replaced with the "unknown user"
icon and the ACL name itself is a long string of alphanums.

I have seen this behaviour in the past when you delete a user, at which
point the account goes "unknown". However the ones I am attempting to apply
are valid, and in widespread use. The problem effects both file ACL's as well
as DCOM settings, which is where I saw it the first time.

It _seems_ like the machine is having problems talking to the domain
controller. The reason I say this is that I notice if I open an ACL list on
my machine, the list will show these same sort of unknown icons for a second
or two before being replaced by the correct name and icon. I assume this
happens as the local machine communicates with the domain server and updates
its display. On the problem machine, this update never occurs.

It can't be that simple though, because the machine can still work on the
network fine, and seems to have credentials.

Anyone seen this before?

Maury

Similar ThreadsPosted
Re: "Broken"/unknown ACL's? November 23, 2005, 12:42 pm
Checking ACL's on 60000 Folders - Advice needed February 14, 2006, 4:48 pm
XP internet security broken November 27, 2005, 5:29 pm
Can 128-bit TripleDES encryption be broken ? January 11, 2006, 12:39 pm
What is broken:McAfeee firewall or my router ????? Urgent, please July 25, 2006, 8:16 pm
Patched Flaw Could Have Broken Internet Backbone July 12, 2008, 11:56 am
Spam Inspector - broken promises (I smell Class Action) February 23, 2006, 11:52 pm
Unknown ID and I even didn't add him or her.... August 23, 2005, 5:05 pm
unknown processes???? June 28, 2005, 4:48 pm
UNKNOWN CONTACT August 21, 2005, 6:33 pm

The site map in XML format XML site map

Contact Us | Privacy Policy