Warning: iconv_mime_decode() [function.iconv-mime-decode]: Malformed string in /home/secureg/public_html/lib/standard.lib.php on line 2251
NTFS permissions isses
NTFS permissions isses

NTFS permissions isses

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
NTFS permissions isses Kim K 11-28-2005
Posted by =?Utf-8?B?S2ltIEs=?= on November 28, 2005, 6:41 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Issue: Shared folders on server 2003 for staff can send data to their
folder but they can not modify or delete files/folders. Administrator of
server can not delete folders although it appears to that single files not
placed in folders can be deleted. When trying to delete folders/files, the
message that "make sure the disk is not full or write-protected or in use
message appears and denies access to deletion for user and all admins.

Setup: Folder created and hidden, properties and permissions are set to
Everyone and full control. Under the security tab, Domain Admins are added
and set to full control, as well as the administrators of the server. The
user has been set for everything but full control. Under the advanced
permission settings the Allow inheritance permissions got checked and ok to
the message that appeared and then I checked the Replace permission entries
on all child objects with entries shown here that apply to child objects and
clicked ok. The Administrators and Domain Admins show full control, the user
is Modify and nothing is inherited from, applies to is This folder,
subfolders and files.

Administrators, Domain admins nor the user can delete any files or folders
form the users folder. If I go back to the advanced permission settings the
Replace permission entries on all child objects box is now unchecked. Since
this appears on all my staff folders I assume that this is normal, but what
am I missing that is not allowing for admin access to delete a simple folder?

Thanks in advance to this nutty problem.

Posted by =?Utf-8?B?V29uZyBUdWNrIFdhaA== on November 28, 2005, 9:46 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi Kim, are you able to verify the following few things.

1. can they delete if they login locally on the server, instead of thru the
shared folder

2. use the effective permissions for NTFS to check what is they have delete
permision

3. since you allow inherited permission, is/are there any groups which have
explicitly deny permission

4. are there any GPO which has set the security on the file system

Knowing all these can reduce the scope for troubleshooting.

"Kim K" wrote:

> Issue: Shared folders on server 2003 for staff can send data to their
> folder but they can not modify or delete files/folders. Administrator of
> server can not delete folders although it appears to that single files not
> placed in folders can be deleted. When trying to delete folders/files, the
> message that "make sure the disk is not full or write-protected or in use
> message appears and denies access to deletion for user and all admins.
>
> Setup: Folder created and hidden, properties and permissions are set to
> Everyone and full control. Under the security tab, Domain Admins are added
> and set to full control, as well as the administrators of the server. The
> user has been set for everything but full control. Under the advanced
> permission settings the Allow inheritance permissions got checked and ok to
> the message that appeared and then I checked the Replace permission entries
> on all child objects with entries shown here that apply to child objects and
> clicked ok. The Administrators and Domain Admins show full control, the user
> is Modify and nothing is inherited from, applies to is This folder,
> subfolders and files.
>
> Administrators, Domain admins nor the user can delete any files or folders
> form the users folder. If I go back to the advanced permission settings the
> Replace permission entries on all child objects box is now unchecked. Since
> this appears on all my staff folders I assume that this is normal, but what
> am I missing that is not allowing for admin access to delete a simple folder?
>
> Thanks in advance to this nutty problem.

Posted by =?Utf-8?B?SWFu?= on November 29, 2005, 12:29 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I'm assuming you want to have a folder or folders which a 'workgroup' of
users can save or modify files in - in this case I'd set the
filesystem-permissions to 'Everyone' (the default) and control access through
the share permissions.

Apart from the difficulties you mention, a key problem with using
filesystem permissions in a workgroup environment is what happens when files
are moved from folder to folder. You would expect the files to acquire the
permissions of their new location.. but they don't. Instead they retain the
their original permissions. This creates all manner of weird paradoxes, like
files moved from a public area to a 'secret' folder remaining
publicly-accessible, despite the folder itself being restricted.

Basically, the filesystem-permissions on WinNT (and even more-so on Linux)
are designed around 'pigeonholed' users who are constrained within the
confines of their own home-folder. They don't implement well in a
collaborative or workgroup environment. Use share-permissions, regardless of
what the textbooks say!



Similar ThreadsPosted
NTFS Permissions September 12, 2005, 8:49 am
NTFS Permissions January 30, 2006, 5:33 am
NTFS Permissions March 24, 2006, 7:02 am
NTFS permissions November 29, 2006, 5:32 am
Re: NTFS Permissions May 23, 2008, 2:41 am
NTFS Permissions and rights October 9, 2005, 5:29 pm
Homedirs - NTFS permissions April 30, 2008, 5:49 am
list NTFS permissions July 30, 2008, 1:40 pm
Export current NTFS permissions. October 18, 2005, 7:31 am
NTFS Rename vs Delete permissions February 28, 2006, 2:07 pm

The site map in XML format XML site map

Contact Us | Privacy Policy