Re: Security tab not showing up in File Properties

From: Karl Levinson [x y] mvp (levinson_k_at_despammed.com)
Date: 10/14/03


Date: 14 Oct 2003 10:56:00 -0700

You know what, since this is only happening on certain files and
folders and not others, I would have to guess that the ACLs have
become corrupted. If so, the fix to try would be to copy the files to
a new folder and delete the old one to generate new ACLs. [Another
option might be to edit the permissions on a parent folder and choose
the checkbox to apply / overwrite inheritance for all subfolders where
inheritance has been blocked, not 100% sure that would work, and it
could reset the permissions on other subfolders which could be
undesirable, depending.]

If that works, then you can set up ACLs on the new folder as you wish,
or just leave the folder inheriting the same permissions as the parent
folder.

When you say XCACLS did not work, I would be curious to know what the
error message was. Though I don't necessarily suspect this in your
case, I suppose a hacker could change the permissions on the files and
then remove your ability to take ownership by somehow corrupting the
ACLs. I would tend to suspect this more if the files were something
of interest to a hacker, such as log files, etc. and you no longer had
access to read the files as well.

There are a few other things that can cause problems for ACLs, such as
using the CACLS / XCACLS commands. However, with problems caused by
those commands, usually I get a popup message in Windows 2000 that
allows me to correct the problem.

"John Bandy" <john.bandy@getronics.com> wrote in message news:<0d2301c38e74$08926bf0$a401280a@phx.gbl>...
> When I view a users document or file (any type of file) I
> am seeing that
> some of the files do not have a security tab and they
> cannot be accesed.



Relevant Pages

  • Re: "Could not change to that identity"
    ... The info we have on this error involves the permissions on the Temporary ... Resetting home folder permissions - MacFixIt ... Remove ACLs on Home Folders and restore them using the Leopard DVD Disk ... Then users should run the following command to ensure the files in the home ...
    (microsoft.public.mac.office.entourage)
  • Re: Users denied access to my documents
    ... it should have the same acl as say, any profile root folder, ... domain users is the same as users on a windows client. ... There are a set of 3 acls which grant users access. ...
    (microsoft.public.windows.file_system)
  • Re: Setting multiple home folders at once
    ... all of my users from the parent folder and checked "Replace permissions ... like putting user back instead of moron ... program I can use to replace permissions on all home folders that are all ... This is supposed to restrict to only ACLs OWNED ...
    (microsoft.public.windows.server.active_directory)
  • Re: More before-the-fact advice for 2K and XP?
    ... > I believe you keyed in too much on the first mention of temp ... That was a standalone comment. ... The temp folder in %systemroot%\temp was a nasty point of contention when ... it looks like the ACLs in that folder are perfect for me. ...
    (microsoft.public.security)
  • Any reason NOT to remove "CREATOR OWNER" from NTFS ACL?
    ... SID "CREATOR OWNER" from the default ACLs in NTFS. ... granting users "change" on a folder, user creates new folder, user ... I can't see any reason to keep "CREATOR OWNER" ...
    (microsoft.public.windowsxp.security_admin)