shared resources security question

From: Costas. (cmm@marinachart.com)
Date: 10/08/02 

From: "Costas." <cmm@marinachart.com>
Date: Tue, 8 Oct 2002 10:12:07 -0700

we recently had a personel change at our office and my
boss asked me if those persons who left would be able to
access our shared resources remotly. i assured him that
this was the case b/c i gave only specific permissions to
a limited number of users.

unfortunately, i tried to access these same shared
resources as a user who should not have access to these
files and i was able to view them as if there was no
security precaution at all.

the pc in question cannot by itself be accessed remotely,
but is sitting behind a firewall managed by a pc that is
accessable remotely (thru PC anywhere). i am afraid that
someone will gain access to this "firewall" pc, and find
the pc i am trying to protect by simply looking at the
LAN/workgroup.

just to clarify, i thought i had only given permission to
a single user besides myself to access this shared
resource, but i was able to view and modify the same as a
completely unrelated user.

There are some starneg things going on under the
Properties of this shared resource. in particular, i
notice that under the Security Tab of the Properties i now
find something i dont remember seeing before:

it has a picture that is different than the rest of
the "user/administrator/group" pics, it is white, has only
one little person (instead of the usual two), and there is
a question mark as well (which is what really scares me)

even worse, instead of explaining, in plain english, what
this user permission is for, it lists a string of numbers
and letters that i dont recognise, namely:

"S1-5-21-436374069-2111687655-854245398-1114"

(i hope i didnt just give out a masters key to our office
resources)

i attach a JPG image here of all the stuff i tried to
desribe above)

i am just curious what this permission is and where did it
come from.

also, if u all have any tips as to how i might more
securly protect this resource, i would be very interested
in hearing it.

i would very much apreciate a reply be email as i dont
know when i will have a chance to check back here.

thanks in advance for all your help w\ this matter.

Best Regards,
Costas Marinakis

Relevant Pages

  • Re: shared resources security question
    ... Set the users permission. ... > access our shared resources remotly. ... > find something i dont remember seeing before: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Threads and Ruby
    ... you must either synchronize or avoid access to shared resources. ... however i was programming java when ... The deprecation of thread stop, suspend, and exception raising was ...
    (comp.lang.ruby)
  • Re: A Solution to the Deadlock Problem
    ... A necessary but not sufficient condition for deadlock occurance is ... that a cycle never occurs by running a cycle detection algorithm. ... there may be certain shared resources that need to ...
    (comp.theory)
  • A Solution to the Deadlock Problem
    ... What is the deadlock problem? ... there may be certain shared resources that need to ... Then, until it frees up all locks on shared resources, it can request ...
    (comp.theory)
  • Re: Maintaining dependencies (was Re: Parmesan)
    ... The thing that muddies the waters is that Acorn decreed in the Style Guide ... The System application is used to hold shared resources provided by ... You must also register its name with Acorn, to avoid ...
    (comp.sys.acorn.apps)
Quantcast