Re: Windows permissions are ignored???

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 10/11/05 

Date: Mon, 10 Oct 2005 18:13:05 -0500

Assuming all else is equal with the other computers in the domain as far as
proper configuration and network availability [including compatible ipsec
policies if used] to that server I wonder if maybe you are accessing the
share via a mapped drive with persistent credentials maybe which is giving
you access other than your logged on account. You could check that and also
on the server use Computer Management/shared folders/sessions to see as what
user account you are accessing the share and/or check the security logs on
the server for type 3 logon events that correspond to the time you access
the share. You could also try checking your effective permissions to that
folder/file in the security properties/advanced - effective permissions
though that is not always accurate. --- Steve

<sv@myrealbox.com> wrote in message
news:1128961273.430712.245960@g14g2000cwa.googlegroups.com...
> Hi Everybody,
>
> I am not a pro in Windows security and permissions and would really
> appreciate if somebody have encountered same problem before.
> We have Windows 2003 domain and there are some network shares that
> need to be protected.
> For example, only Managers group should has full access to folder
> "Secret stuff"., that is owned by OurDomain\Administrators.
> Permissions are not inherited from the upper directory structure and do
> not propagate to child objects for this folder and no other
> users/groups are mentioned in ACL.
> Here comes the weird stuff.
> I logon to my Windows 2000 workstation as member of Domain
> Administrators (I am not in Managers group, however!) and I can
> traverse this 'secret' folder, seeing filenames and directories
> structure.I cannot see objects security properties.
> When I logon to another Windows 2000 or Windows 2003 machine,both
> members of the same domain, all I get is "Access denied message",
> exactly what is expected with this kind of permissions.
>
> Am I missing something very basic or my computer is possesed by dark
> forces?
> Please let me know what directions I should look to, any advice will be
> gratly appreciated!
>

Relevant Pages

  • Re: Permissions to a specific file, deep within many folders
    ... though because I had parent properties that I had to ... >Set the permissions on the file itself and in the ... >the inheritence from parent folder (don't remember the ... >> In order to get her down to the proper file I have put ...
    (microsoft.public.win2000.active_directory)
  • Re: Setting Share and NTFS permissions properly
    ... folder names within the Users folder, but you can achieve the effect you ... In the Security properties, admins ... If someone's not listed in permissions ...
    (microsoft.public.win2000.security)
  • Re: Sharing a network folder properly
    ... will allow the to browse the Users directory. ... and select "copy" the permissions. ... I've read some conflicting information about the proper way to share a ... We have a shared folder on a Windows 2003 server that serves as a "users" ...
    (microsoft.public.windows.server.general)
  • Re: Sharing a network folder properly
    ... "Coastal California" wrote: ... and select "copy" the permissions. ... I've read some conflicting information about the proper way to share a ... We have a shared folder on a Windows 2003 server that serves as a "users" ...
    (microsoft.public.windows.server.general)
  • Re: Rights to a drive/folder
    ... How do you add right to a specific folder on a server through active ... these are "Permissions" which help you when you learn ... By using the Security properties of the Directory you set the permission ... for that separate object (to a larger variety but somewhat similar set ...
    (microsoft.public.windows.server.active_directory)