RE: Files in Systems Directory WINNT

From: Jeff Qiu (jefffqiu@online.microsoft.com)
Date: 01/06/03 

From: jefffqiu@online.microsoft.com (Jeff Qiu)
Date: Mon, 06 Jan 2003 06:18:30 GMT

Hi Shane,

When we create a file on a NTFS partition, the rights will be by default
inherited from the parent folder.

If you need to specify the special rights for it, you may first set it to
"None" and then grant the appropriate rights.

Here is an example (C: is NTFS):

//test.bat

dir d:\*.* /s > c:\dlist.txt
copy c:\dlist.txt c:\dlist1.txt

;First Replace the rights for Everyone with None
cacls c:\dlist1.txt /R everyone:N

;Edit and Grant the rights as Read to Everyone
cacls c:\dlist1.txt /E /G everyone:R

//End

You may compare the file attributes between the C:\dlist.txt and
C:\dlist1.txt.

For more information about the cacls, please refer to the Windows Online
Help.

Regards,

Jeff Qiu
jefffqiu@online.microsoft.com
Online Support Professional
Microsoft Corporation

This posting is provided Ħ°AS ISĦħ with no warranties, and confers no
rights.

--------------------
>Content-Class: urn:content-classes:message
>From: "Shane Ely" <sely@orlandusd.net>
>Sender: "Shane Ely" <sely@orlandusd.net>
>Subject: Files in Systems Directory WINNT
>Date: Sat, 4 Jan 2003 13:14:11 -0800
>microsoft.public.win2000.security
>
>Hi.. I have a application program that puts five files in
>the WINNT Directory on every Windows 2000 Workstation. I
>use a batch file to rewrite the permissions that each user
>needs to those files. I have disabled GP except for the
>default GP. Next thing I know is the five files
>permissions are wiped out. Help? Thanks
>

Relevant Pages

  • Re: Prevent changes to Administrator password
    ... What I am trying to do is give Taz1972 some options to minimize the risk or make it harder for a lower-level DA to reset the password for the EA account. ... Restricted Admins group to mitigate against what you propose Deji. ... also need to make sure the DAs in question cannot elevate their rights to EA, ... > By adding the Deny Write Permissions ACE, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Prevent changes to Administrator password
    ... What I am trying to do is give Taz1972 some options to minimize the risk or make it harder for a lower-level DA to reset the password for the EA account. ... * This posting is provided "AS IS" with no warranties and confers no rights! ... > By adding the Deny Write Permissions ACE, ... > permission to modify the ACL on AdminSDHolder. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Why is Fedora not a Free GNU/Linux distributions?
    ... Taking away legitimate rights, yes, that would be immoral. ... specifically to be incompatible with the GPL, ... Software license) doesn't take away any right you had. ... There are other permissions that enable you to copy and distribute the ...
    (Fedora)
  • Re: Prevent changes to Administrator password
    ... Have you thought about delegating the exact permissions needed instead of using DA or restructing your forest? ... * This posting is provided "AS IS" with no warranties and confers no rights! ... > Restricted Admins group to mitigate against what you propose Deji. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Prevent changes to Administrator password
    ... * This posting is provided "AS IS" with no warranties and confers no rights! ... his/her account from the Restricted Admin group and clears the flag? ... > By adding the Deny Write Permissions ACE, ... > permission to modify the ACL on AdminSDHolder. ...
    (microsoft.public.windows.server.active_directory)