Re: Permissions

From: Chris Berry (compjma@hotmail.com)
Date: 12/07/02

  • Next message: Optrics Engineering - Shaun Sturby, MCSE: "RE: how to search all machines on a network." 
    From: "Chris Berry" <compjma@hotmail.com>
To: security-basics@securityfocus.com
Date: Fri, 06 Dec 2002 15:51:37 -0800

    >From: Nexus <nexus06@drxlabs.com>
    >goto sysinternals.com there are lots of good tools there that when run
    >before you run an app will tell you what it is accessing, including reg
    >keys dll , etc...

    Hmm, I might try that. I wonder if its worth it though, I'm pretty paranoid
    when it comes to security, but this just sounds like an administrative
    nightmare. What is it that you think a user could do with the permissions I
    mentioned that they couldn't with the ones you're suggesting? I mean you're
    going to have to give them some write permissions in order for some of your
    apps to work, and then all they have to do to install software is direct it
    to one of those directories.

    >another group you can utizile is authencated users, this group will make
    >sure a user is 'authencated'
    >this group is in leiu of the 'everyone' group.

    I pretty much never use the everyone group except where it is already
    installed. I tried setting up one machine where I removed the everyone
    group and gave explicit permissions instead, but win2k choked on that big
    time, revealing the fact that many M$ process depend on the base permissions
    in order to function. (bad coding practice if you ask me)

    Chris Berry
    compjma@hotmail.com
    Systems Administrator
    JM Associates

    "Live dangerously, overclock your servers."

    _________________________________________________________________
    MSN 8 with e-mail virus protection service: 2 months FREE*
    http://join.msn.com/?page=features/virus

    Relevant Pages

    • Re: SQL 2000 Windows Authentication - Same User Multiple Groups
      ... functionality using our WinForm app and read-only functionality using ... SQL Server permissions are not application-aware. ... App1 contains CRUD functionality using stored procs (EXEC perms on ...
      (microsoft.public.sqlserver.security)
    • Re: Copying Files from Network to Local
      ... working using Code Access Security, ... website has less trust associated with it, and less permissions assigned ... However, when the app resides on a network drive, copying ...
      (microsoft.public.dotnet.languages.csharp)
    • Re: ASP App Hangs. ALL FIXED!
      ... It seems that when you disable Script Blocking in NAV (actually SYM ... > Up until the other day, the app worked without problems. ... > volume and has the correct permissions assigned and have not ...
      (microsoft.public.inetserver.asp.general)
    • Re: HELP please - I think this is a permissions problem - ASP.Net application
      ... Have you checked the permissions for the file itself? ... Ur I.T. Mate Group ... > Trying to run this app. ... > - Windows Media Services Guest Account ...
      (microsoft.public.inetserver.iis)
    • Re: Copying Files from Network to Local
      ... The rights that you have ... website has less trust associated with it, and less permissions assigned to ... However, when the app resides on a network drive, copying ...
      (microsoft.public.dotnet.languages.csharp)
    • Quantcast