Re: Permissions on System Volume Information

From: Will (DELETE_westes_at_earthbroadcast.com)
Date: 11/23/05

  • Next message: Barry: "Re: Resetting "Password never expires" for all" 
    Date: Tue, 22 Nov 2005 20:18:23 -0800

    Logged in as a local administrator I am able to edit the ACL.
    Administrators show as the owner of the folder.

    On Windows 2000, I'm seeing SYSTEM listed but *NO* access level checkboxes
    selected.

    Under Windows 2003, I'm seeing SYSTEM listed with Full Control. 

    -- 
Will
"Roger Abell [MVP]" <mvpNoSpam@asu.edu> wrote in message
news:#11j4ry7FHA.4036@TK2MSFTNGP11.phx.gbl...
> How are you looking at the grant ??
> The normal state for System Volume Information is a single
> non-inherited grant of Full Control to System
>
> "Will" <westes-usc@noemail.nospam> wrote in message
> news:%23p2LRex7FHA.3804@TK2MSFTNGP14.phx.gbl...
> > I'm seeing that the System Volume Information folder from the root of
the
> > boot device has an ACL with the SYSTEM user and *no* access granted to
> > that
> > one user.   How bizarre is that?   I can understand that only the OS
needs
> > access to this sensitive information, but then shouldn't I expect to see
> > an
> > ACL with SYSTEM granted at least Modify privileges to the folder?   What
> > is
> > the point of having any object in the ACL at all if they aren't going to
> > grant some privilege to it?
> >
> > -- 
> > Will
> >
> >
>
>
  • Next message: Barry: "Re: Resetting "Password never expires" for all"

    Relevant Pages

    • Re: Newbie security programming questions
      ... > I am trying to get to the GUI described in this page to change the ACL ... > Is GUI ACL viewer not available with all versions of Windows? ... How to disable simplified sharing and set permissions on a shared folder ...
      (microsoft.public.platformsdk.security)
    • Re: Word (program) question
      ... .acl files are named the same (and that you transfer the correct .acl ... dictionary file over from a folder of one name on the previous computer to ... Professional computer but not on my Windows XP professional computer, ...
      (sci.med.transcription)
    • Re: Problems with AppData on Vista.
      ... Its actually the ACL stuff im most unsure about. ... traditionally has had to run on Windows 9X where the security APIs simply ... CreateDirectory - specifically in the Common_AppData folder, ...
      (microsoft.public.platformsdk.security)
    • Re: Minimum NTFS Permissions on the SystemDrive
      ... File system and registry access control list modifications ... Microsoft Windows XP and Microsoft Windows Server 2003 have considerably ... You can no longer use the Anonymous security ... Additional ACL changes may invalidate all or most of the application ...
      (microsoft.public.windows.server.security)
    • Trouble with XCACLS.VBS and denying Execute access
      ... Full Control (This Folder, Subfolders and Files) ... If I change the permissions to look like those above through the GUI, ... The first line REPLACES the ACL for the current user with the Full Cont ...
      (microsoft.public.security)