Re: permissions on subfolders with drag and drop


<bmense@xxxxxxxxx> wrote in message
news:1184786206.610425.273800@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I just migrated from a Novell server to a new Microsoft Cluster with
Windows 2003 R2.

I've ran many MS servers but never ran into this issue.

My setup is something like this

I:\Group\ACT\ ACT Group with full rights
I:\Group\ACT\Year\ Year Group with full rights

A user creates a 2007 Directory in I:\Group\ACT\, then realizes that
it should be under Year.
using drag and drop from a windows XP system. he moves the folder.

Users wth full access in the Year Group, don't have access to the new
2007 year folder.

I've tried this with cut and paste and the rights work ok.

Is there a way to fix this problem?

Depends on what you consider to be the problem. If it is just a matter of
fixing the permissions on the 2007 folder, an account with change
permissions privileges (i.e. an administrator) can cause the permissions of
that folder to be inherited from the parent.

If the problem is that you want moved folders to wind up always inheriting,
your options are:

- copy the folder then delete the original. the desired permissions will be
inherited statically from the parent.
- use cut and paste - the paste part is functionally more like a copy than a
move. This may be true only in the case where the drive is on a different
computer than the one from which the copy is run.
- make sure that folders to be moved have been set to dynamically inherit
permissions from the parent.

I find when I move folders like this, sometimes the permissions are changed
and sometimes they are not. I think it may have something to do with how the
original permissions were applied, which can be a combination of various
permission-setting tools and o/s upgrade paths taken (NT to 2k to 2k3). When
I move folders, I always check and fix if necessary. When our users move
folders it is most often within a folder tree where all branches have the
same permissions, so the issue is moot.

/Al


.

Relevant Pages

  • Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
    ... In order for Alice to Take Ownership of Bob's private folder she would ... Owner and now Bob no longer has the ability to set permissions on it. ... And Windows does have a umask-like function. ... This article contains a set of attack scenarios to demonstrate security ...
    (Full-Disclosure)
  • Re: User rights problem (Least Privilege)
    ... After giving write permission to Users group on Windows folder the ... >> I am managing a small network with Windows 2003 as DC and XP as clients. ... > inexperienced or limited user should ever have write permissions. ... > limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Modify advanced permissions using wsh on W2K Server
    ... the checkbox that applies changes made to a folder to ... parameters it requires to accomplish your permissions changes. ... >> Two lines of your gifted experience with windows ... >> In the event you had not unchecked the daylight savings time box ...
    (microsoft.public.scripting.wsh)
  • Re: Password
    ... You don't assign passwords to files in Windows XP, ... In Windows Explorer, go to Tools, Folder Options, View and uncheck ... Here you can assign or deny permissions based on user name or user ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Need to override Windows user password to access files.. Help!
    ... you can set XP Home permissions in Safe Mode. ... Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ... First, go to Windows Explorer, go to Tools, select Folder ...
    (microsoft.public.windowsxp.accessibility)