Re: file transfer security issue

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 06/30/05 

Date: Thu, 30 Jun 2005 11:12:13 -0400

In news:90961563-B85B-47C7-9493-1847162EA924@microsoft.com,
wayne <wayne@discussions.microsoft.com> typed:
> folders were either copied or moved from a 2000 server to a 2003
> server ( not sure how the user got thr files to thew new server)

Well, if they weren't supposed to, you'd better have a look at your overall
security.

> I
> can access all the files and folders from the server as well as
> create new folders. from a workstation logged in as administrator I
> can only view the files and can not make any changes or new files and
> folders.
> somehow tge security has seemed to have gotten corrupted. I have made
> other security groups and have given the group full access and have
> the same issue logged in as other users.
>
> How do I fix this problem

Remember, in Win2003 (and in XP), the default share permissions are
everyone=Read Only. Change this to Everyone=Full Control (or if you want to
be more granular, add only the groups you wish & grant Full Control)
Then, your NTFS permissions will apply as you would expect. If a user has
Read Only from the share, but Full Control in NTFS, they'll have Read Only,
period.....the most restrictive rights apply.

Relevant Pages

  • Re: Setting up a domain
    ... > computer that stands alone and acts as our server. ... Yes a domain can help with improving security but by itself it doesn't mean ... but I'm guessing that's so from the '10 computers') as it can cause ... allow or deny people access to various folders, ...
    (microsoft.public.security)
  • Re: Moved & Deleted Files
    ... share will not go to the recycle bin on the server. ... For Windows 2000 you can enable auditing of object access in the Local ... Security Policy or Domain Controller Security Policy for domain controllers ... and then audit folders for user access. ...
    (microsoft.public.security)
  • Re: IIS Seperate Partition?
    ... > Or, had you installed the security patch, available six months prior ... > under Server 2003, the OS the original poster said he's running. ... Which makes moving the folder to a separate partition a shot ... And anyone who is able to control a partition already ...
    (microsoft.public.inetserver.iis.security)
  • Re: Server security
    ... then you were probably sitting there with anonymous access enabled to FTP ... > anyway after all the problems that I had with the server, I have the> purpose of at least learning some basics on server security. ... > I can tell you that I noticed that we had a security problem because I> started finding lots of new folders and/or files in the IIS folder, which> I erased many times and again were created in the server. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Forcing Ownership of files
    ... >> without that right IF they have Full Control. ... > have explicit permission to do whatever they like with the content of ... > when I first tuned up here from a Novell server to a Windows 2000 server ... Now they are worried about security so ...
    (microsoft.public.win2000.active_directory)