Re: Permissions Puzzle

From: Michael Bednarek (mb_at_dev.nul.com)
Date: 10/26/03


Date: Sun, 26 Oct 2003 01:36:42 GMT

On Sat, 25 Oct 2003 16:57:39 -0700, "Jade"
<anonymous@discussions.microsoft.com> wrote in
microsoft.public.win2000.security:

[edited: recently changed ACLs did not affect existing files]

I'm not on an NT system at the moment, but I think there's a button on
the Security tab -possibly in the Advanced dialogue- which will apply the
current settings to all objects below. Have you tried that?

Or you could use a command line tool, like CACLS or the like.

Three comments on your ACLs:
1. Don't grant anything on the network to Everyone, use Domain Users
instead.
2. Don't grant anything on the network to Administrator, use Domain
Admins instead.
3. Don't grant Full Control to anything on the network to anybody but
Domain Admins; grant R/W/C/D, but not Full Control.

-- 
Michael Bednarek
http://mcmbednarek.tripod.com/           "POST NO BILLS"

Loading