Spontaneous permission changes-How?Why?

From: TimeTraveller (nowhere_at_null.net)
Date: 09/23/05

  • Next message: Brian Komar [MVP]: "Re: revoking ipsec certificate doesn't work"
    Date: Fri, 23 Sep 2005 14:06:23 GMT
    
    

    I've got a chronic problems with a 2003 server domain. The file/folder
    permissions on the users server shares are spontaneously deleting all
    permissions except admininstrators - FullControl. (These are File
    permissions NOT share permissions I'm referring to )

       We know the users aren't doing it because they aren't knowledgeable
    enough. We turned on auditing, and sure enough while we are sitting there
    chatting with the user, the permissions are automagically changed by the
    users account.

       The only way we've been able to fix is blow away the account and create a
    new one from scratch and that seems to solve the problem, but it's most
    worrying to have a renegade process like that on the loose.

       This is a DC with a single server and 10 WS and the users have roaming
    profiles with file synchronization on.

       It's well protected with SonicWall firewall and McAfee Net antivirus
    subscription, and user accounts are locked down tight so they can't do
    anything execpt work.


  • Next message: Brian Komar [MVP]: "Re: revoking ipsec certificate doesn't work"

    Relevant Pages

    • Re: write with cURL
      ... execute permissions. ... of potential security risks from other users on the same server. ... I made this suggestion because their web host appears to run Apache ... risk to allow Apache's group write access, since all PHP scripts ran ...
      (alt.php)
    • RE: Windows 2003 Server - Everyone Group
      ... this folder only accessable by the users in the "special" group. ... Configure User and Group Access on an Intranet in Windows Server ... NTFS files system permissions control ... group that you want to set permissions for, click Check Names to verify the ...
      (microsoft.public.win2000.networking)
    • Fail DBD::Mysql 4.003 installation
      ... This test requires a running server and write permissions. ... permissions, then retry. ... Failed 9/9 tests, 0.00% okay ...
      (perl.dbi.users)
    • Re: write with cURL
      ... execute permissions. ... of potential security risks from other users on the same server. ... I made this suggestion because their web host appears to run Apache ... risk to allow Apache's group write access, since all PHP scripts ran ...
      (alt.php)
    • Re: Virtual Directory - Permission Denied with fso CopyFile
      ... TestUser (normal user account with same credentials on all machines). ... I created a share on a remote server. ... reviewing it's sharing permissions and security tab permissions "everyone" ... "directory security" tab on the vdir and selecting, edit, edit and manually ...
      (microsoft.public.inetserver.iis)