Re: Setting up Security on Files and Folder

From: Ron Bernier (mynameishidden_at_toyou.com)
Date: 06/28/04 

Date: Mon, 28 Jun 2004 12:42:49 -0400

I'll assume by "even though this is an NT server" you mean NT4 ... The
default permissions on BOOT.INI is:

Administrators: Full (RWXDPO)
Everyone: Read (RX)
System: Full (RWXDPO)

I changed an NT4 server to:

Administrators: Full (RWXDPO)
Everyone: Read (R)
System: Full (RWXDPO)

and it booted fine (which was a question in your updated post) ...

Get a copy of Microsoft Virtual PC for ~$135 ... Testing these kinds of
things on virtual devices that you can shut down without saving changes is a
GodSend :-) ...

"John" <John@discussions.microsoft.com> wrote in message
news:F518B713-9973-4CAA-B51C-4ECB7672AEF8@microsoft.com...
> I am trying to setup Security on Files and Folders on WINNT folder and
beneath that, and also on the system root files like Autoexsec.bat,
boot.ini, ntldr,config.sys etc...
>
> Scenario:
>
> I want to change the permissions on BOOT.INI file from the existing
EVERYONE group which has FULL PERMISSIONS to READ permissions. (Even though
this is an NT server but after installing MMC, the permission settings looks
like for Windows 2000, so that is the reason I am posting it in this group).
>
> I want to change this to have SPECIAL PERMISSION as READ and not RX. So,
when I do change it to READ it does not show as SPECIAL PERMISSION under
PERMISSIONS tab in ADVANCED option under Security Tab.
>
> When I click on VIEW/EDIT option, I see the following options under
Permissions Enabled.
>
> List folder/Read data - Enabled
> Read Attributes - Enabled
> Read Extended Attributes - Enabled
> Read permissions - Enabled
> Synchronize - Enabled
>
> My question is, is this setting correct, where I have taken of all the
permissions under the main permissions window to have only READ Special
access.(Again it is not RX).
>

Relevant Pages

  • RE: Access Denied when running RSoP
    ... The launch and activation security descriptor for the COM Server application ... It contains Access Control Entries with permissions that are ... which is a part of the McAfee Common ... > Administrators - Full Control - This namespace and subnamespaces ...
    (microsoft.public.windows.server.sbs)
  • RE: logon error: error occured while an inital user program was st
    ... explorer.exe permissinos and I have Administrators, Authenticated Users, ... Server Operators, System as the groups that have permissions, with the ... Authenticated Users having less permissions. ... I added domain users, and everything started working. ...
    (microsoft.public.windows.terminal_services)
  • IUSR and IWAM Permissions
    ... Our server administrators recently changed the permissions of most of our ... servers (you know how it is, the developers had, shock horror, got to know ... I ran a few tools and found out that it seems to be the permissions of IUSR ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Preventing running batch files
    ... The problem is not that they run batch files - credentials must be provided in order ... to gain access unless the guest account is enabled on that server. ... permissions are too permissive - check advanced permissions also. ... change password and do the same for administrators on that server and in the domain. ...
    (microsoft.public.win2000.security)
  • Re: couldnt change the date on machine
    ... It is permissions on the workstation. ... i thought it might be to do with the user permission set on the server ... I haven't tried to change from power user to administrators. ...
    (microsoft.public.windows.server.sbs)