Re: Bypass Traverse Checking not working

From: Bruce Bradbury \(remove XXX\) (b.bradburyXXX@unsw.edu.au)
Date: 03/28/02

  • Next message: Binesh Bannerjee: "Re: Audit Failures/READ_CONTROL SYNCHRONIZE"

    From: "Bruce Bradbury \(remove XXX\)" <b.bradburyXXX@unsw.edu.au>
    Date: Thu, 28 Mar 2002 14:15:45 +1100
    
    

    Both server and workstation are using sp6. I've also discovered that you can
    directly open a file in the lower level directory, but not the folder
    itself. That is, Start/Run \\server\user$\testfolder\public\example.txt
    works, but Start/Run \\server\user$\testfolder\public\ gives an error
    message "This file does not have a program associated with it for performing
    this action..."

    "Eric Fitzgerald [MSFT]" <ericf@online.microsoft.com> wrote in message
    news:3ca24bef@news.microsoft.com...
    > What service pack are you running on NT4?
    >
    > How are you getting to the directory?
    >
    > I would expect this to fail for directory browsing via Explorer, but it
    > should succeed if you specify the entire path, say from Start\Run.
    >
    > Eric
    >
    > --
    > Eric Fitzgerald
    > Program Manager, Windows Auditing and Intrusion Detection
    > Microsoft Corporation
    >
    >
    > "Bruce Bradbury (remove XXX)" <b.bradburyXXX@unsw.edu.au> wrote in message
    > news:a7oscg$4ca$1@tomahawk.unsw.edu.au...
    > > On our winNT4 server, I have "bypass traverse checking" enabled for
    > everyone
    > > (the default setting). I give everyone read access to a lower-level
    > folder.
    > > The folder above has access only available to administrators. On a win2k
    > > workstation, I can open the lower level directory with no problems (eg
    by
    > > typing the full path in the run dialog). However, on winNT4 workstations
    > > this does not work (unless I give everyone access to the directories
    > above).
    > >
    > > Any suggestions?
    > >
    > >
    >
    >



    Relevant Pages

    • RE: My Docs not redirecton on single workstation
      ... I understand that My Documents Redirection ... Properties, click the Target tab, click Move to change the folder ... If it is not the case, please try to log on to another workstation ... click to check the "Hide All Microsoft Services" ...
      (microsoft.public.windows.server.sbs)
    • Re: Network shares cannot connect
      ... Changed value to 0 just waiting to re-boot the server and test logins. ... Workstation Name: - ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, select ...
      (microsoft.public.windows.server.sbs)
    • Re: Network shares cannot connect
      ... Changed value to 0 just waiting to re-boot the server and test logins. ... Workstation Name: - ... let's focus on the Users Shared Folder first. ... To check this permission, please click the Advanced button, select ...
      (microsoft.public.windows.server.sbs)
    • Re: Torgeir Bakken
      ... > are members of its just mapping by groups that COMPUTERS are members of. ... permit a resource to it and add a workstation to it. ... files you are to update are in the unit seven folder". ...
      (microsoft.public.windows.server.scripting)
    • Re: Folder Security
      ... Another possibility is to put another workstation in that location. ... in question from their own or other machines on the network. ... there a way to secure folder access by which machine is trying to access ... permissions apply only to network users. ...
      (microsoft.public.windowsxp.security_admin)