Re: which policy resets secuirty permisions on files/directories?
From: karl [x y] (jamescagney90210@excite.com)
Date: 08/02/02
- Next message: Joe Richards [MVP]: "Re: new Password check against dictionary"
- Previous message: Björn Johansson: "Applying patches on Windows 2000 servers"
- In reply to: John: "which policy resets secuirty permisions on files/directories?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "karl [x y]" <jamescagney90210@excite.com> Date: Fri, 2 Aug 2002 07:40:17 -0400
"John" <JericAtSbcglobalDotNetwork> wrote in message
news:Xns925E1582FD946jeric129mmXYZcable00@207.46.239.39...
> Hi,
> If I make adjustments to a directory's security policies (i.e. adding
> a group, or changing access permissions for an exisiting group) when the
> computer reboots or refreshes the policies, the directory permisions are
> reset to the default.
>
> e.g. If I add "domain guest" to the c:\winnt\system32\driver directory and
> uncheck the "allow inheritance" option, when the system reboots (or
> refreshes the policies) then the 'domain guest' is removed, and the "allow
> inheritance" is rechecked.
>
> How can I keep this from happening? I believe this to be an option
> somewhere in the AD group policies, but I can't figure out which one.
Doesn't exactly sound like an option. I'm guessing some policy that an
administrator has enabled somewhere either locally or in Active Directory
has set these permissions on that folder or possibly a parent folder. See
if you can do Start, Run, MMC, add the Group Policy / Security Configuration
snap-in for the local computer policy and check the effective settings on
that folder and the parent folders.
I don't think Windows 2000 caches the Active Directory domain group
policies, so you could try unplugging the network cable, rebooting and
logging in, change the NTFS settings to be correct on the folder, do Start,
Run, secedit /refreshpolicy machine_policy wait a minute and then check
the permissions on the folder. If the permissions on the folder changed, I
think the problem is in the local group policy on the computer. If you plug
the network cable back in and run the same command, and the NTFS permissions
on the folder change only then, then I think the problem is a group policy
somewhere in Active Directory [these can be seen and changed in the Active
Directory Users and Computers MMC].
I think there might be a Windows 2000 Server resource kit utility to help
show which group policies are being applied. Some of those utilities might
be available for free download from www.microsoft.com/download
- Next message: Joe Richards [MVP]: "Re: new Password check against dictionary"
- Previous message: Björn Johansson: "Applying patches on Windows 2000 servers"
- In reply to: John: "which policy resets secuirty permisions on files/directories?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
