Strange Permission problems that arise after SP3

From: Robert Connon (rob@VFS.COM)
Date: 10/23/02 

Date:         Tue, 22 Oct 2002 16:33:09 -0700
From: Robert Connon <rob@VFS.COM>
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

Hi All,

Here's the scenario,

Windows 2000 SP3 in a Full Native mode AD Domain.

Harddrive; NTFS permissions= Domain admins (full control) Everyone(list)

               Share Permissions= Everyone (full control)

I create a folder within the harddrive and assign permissions as
follows.

Domain admins (full control).removing the inherit options

If I connect to the share as a normal user I can delete this folder, the
user has no access to the folder nor the contents But can delete it !
(works locally aswell)

So I looked at the Advanced permissions under the advanced tab and

The everyone group that I have assigned the "list" permission to has
these extended permissions

**Special**

-Traverse folder / execute files

-Delete sub folders and files

-Delete

-Change permissions

-Take Ownership

Applied to "this folder, sub folders and files"

Under Win2k SP2 this special entry does not exist...

And all permissions are ok.

Has anyone else encountered this?

Regards,

Robert J Connon
Senior Systems Administrator
Vancouver Film School
T (604) 685-6331 x130
F (604) 685-6317
W <http://www.vfs.com> http://www.vfs.com

Vancouver Film School. Creative. Disciplined. Focused.

LDAP://cn=rob,ou=informationtechnology,ou=newmedia,dc=vfs,dc=420

Relevant Pages

  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The fact that the tech support is based in India has nothing to do with the ... If so you may want to leave this folder alone. ... down to all children folders because i can set those permissions to ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The only computers i fix are my own. ... If so you may want to leave this folder alone. ... it includes all subdirectories with inherited permissions. ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Word mail merge data source
    ... "Peter Jamieson" wrote: ... Word on it) then there may be a problem if the folder containing the data ... Word builds a connection string. ... superset of other users' permissions - for example, ...
    (microsoft.public.word.vba.general)
  • RE: no OWA
    ... have the correct permissions was the "inetpub" folder. ... Correct the settings in IIS: ... click to check the "Hide All Microsoft Services" ...
    (microsoft.public.windows.server.sbs)