Re: Where does windows store the "Inhert from parent the permission entries..."

From: Pavel Lebedinsky (m_pll_at_hotmail.com)
Date: 09/05/04


Date: 5 Sep 2004 00:13:34 -0700


"Ian Boyd" wrote:

> Where does Windows store the "Inhert from parent the permission entries
> that apply to child objects. Include these with entries explicitly
> defined here." flag?

I suspect that the ACL editor simply looks for ACEs with INHERITED_ACE
flag set.

I'm not sure how it would show an object that only inherits a subset
of the inheritable ACEs from its parent, but this situation seems to
be impossible to create using the editor.

> It can't be inside the ACL for an object, since if the ACL has no locally
> defined entries, and we disable inheritance onto an object, then there is
> nothing to store the flag on.

No inherited ACEs == checkbox is unchecked. Which is how it seems to work.