File permissons

From: Brian Morris (softcom_at_tstt.net.tt)
Date: 02/09/05 

Date: Wed, 9 Feb 2005 13:08:21 -0400

Hello,
I need some help with setting the correct permissions on computers in a
domain.

My problem is the if Administrator user logs in and runs an app that creates
a file in C:\MyApp, and then Non-Admin user logs in on the same computer and
tries to access the file that was created the Non-Admin user has no file
permissions.

I've noticed that after the Admin user logs off, the advanced security
option on the file for "Inherit from parent the permission entries that
apply to child objects..." does not get turned on even though in the
advanced options for both C:\ and C:\MyApp folders have a tick in "Inherit
from parent the permission entries that apply to child objects. Include
these with..."

I looked at the permissons on both C:\ and C:\MyApp.
C:\
Administrators - Full Control
Creator Owner - Nothing
EveryOne - Nothing
System - Full Control
Users - Read & Execute but not Modify not Write

C:\MyApp
Non-Admin - Nothing
Administrators - Full Control
Creator Owner - Nothing
Domain Users - everything EXCEPT Full Control
System - Full Control
Domain Users - everything EXCEPT Full Control

I don't know where else to look for the option that would tell a file to
inherit permissions from its folder.

Thanks
Brian

Relevant Pages

  • Auto-created printers default security permissions
    ... When a user logs in, it auto creates their local default printer only and no ... only the user and the Administrators group have permissions to ... created local client printers? ...
    (microsoft.public.windows.terminal_services)
  • Re: XP Group/File Permissions (Possible BUG found)
    ... When a user logs into a system, they are issued a token which essentially ... > Then assigning Permissions to a directory so that> group "Apps" has full Access, and of course all members> of this group should also have full access. ... > What I mean is, the system will prevent any user in the> new group from accessing the directory with the new group> permissions, until a system reboot. ... > However, I am also aware that some features that seem> like a bug, are really features by design, and although> that may be reasonable in some cases, this certainly can> not be one of those. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Permissions
    ... when a user logs onto ... > screen using a different account (WITH permissions to access) and they tick ... > way to get rid of this is to delete the persons local profile and start again. ... > someone accidently ticks this box without having to delete their local ...
    (microsoft.public.sharepoint.portalserver)
  • Permissions
    ... when a user logs onto ... screen using a different account (WITH permissions to access) and they tick ... way to get rid of this is to delete the persons local profile and start again. ... someone accidently ticks this box without having to delete their local ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Restricting Certain Binaries - Steve?
    ... ntfs/share permissions, eliminating unnecessary services, etc. ... administrators group from the "access this computer from the network" user right ... I don't know exactly how an attacker or worm gets system control. ... > execute any of these binaries from my desktop. ...
    (microsoft.public.win2000.security)