Re: Folder ownership/permissions

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 07/01/04


Date: Wed, 30 Jun 2004 18:28:24 -0700

Have you mentioned every ACL on those folders, or
only those that you see as relevant? Also, have you
been using the Advanced button, since some grants
and/or denies do not show up in the generic view.

You could start / run cmd to get a cmd prompt
and then issue
cacls "D:\Folder1" > c:\folder1.txt
cacls "D:\Folder2" > c:\folder2.txt
to get two files that state the complete NTFS settings
on these folders. I suspect there is more in the NTFS
settings than you have mentioned.

To reset the permissions try
cacls "D:\Folder1" /t /g administrators:f
cacls "D:\Folder1" /e /t /g users:c

This will result in Administrators having Full Control
and Users members (limited accounts) having Change
and there will be no other settings in the NTFS permissions
after these are used.

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Peter" <anonymous@discussions.microsoft.com> wrote in message
news:238d601c45ef7$7d434470$a601280a@phx.gbl...
> <from an earlier post that is no longer getting replies,
> so i reposted my questino:>
>
>
> Okay, I tried those things and still have problems.  This
> one really is confusing me, here is where I'm at:
>
> On two different folders, in the D: drive, with identical
> settings:
>
> Owner is set to Administrators
> As for permissions:
> Administrators - Full control, not inherited
> Everyone - Full control, except take ownership -inherited
> from D:
> MyUsername(also an admin) - Full control, except take
> ownership - inherited from D:
>
> --------------------------------------
> both these folders have identical settings, yet i can
> access D:\Folder1, but NOT D:\Folder2.  EVERY setting is
> the same. what gives?
>
> Is there any way to just erase all ownership and
> permissions and just have everything accessible to
> everyone,even with me being the only user on this
> machine?!?
>
> Thanks guys,
> Pete
>
>
>
>
> >-----Original Message-----
> >On the Security Tab, click Advanced, then the Owner
> Tab.  In the Change Owner to list, select your username,
> or Administrators if you prefer.  Check the box for
> Replace owner on subcontainers and objects and click
> Apply.
> >
> >-- 
> >Doug Knox, MS-MVP Windows Media Center\Windows Powered
> Smart Display
> >Win 95/98/Me/XP Tweaks and Fixes
> >http://www.dougknox.com
> >--------------------------------
> >Per user Group Policy Restrictions for XP Home and XP Pro
> >http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> >--------------------------------
> >Please reply only to the newsgroup so all may benefit.
> >Unsolicited e-mail is not answered.
> >
> >"Peter" <anonymous@discussions.microsoft.com> wrote in
> message news:22bb001c45e28$4469be60$a601280a@phx.gbl...
> >> Gordon:
> >>
> >> thanks, i tried that, however I still ahve the same
> >> problem.  Do I need to remove all of the permissions
> >> under the permissions tab, and simply leave the owner
> as
> >> Administrators?
> >>
> >> Or do I have to go to each folder manually and add my
> >> user name, Administrator, and Administrators to the
> >> permissinos tab in a hope that that will allow me to
> open
> >> the folders based on the fact that everyone will then
> >> have access?
> >>
> >> thanks for the help
> >> Pete
> >>
> >>
> >.
> >
> .
>
>


Relevant Pages

  • Explorer error with non-admin accounts
    ... >>that Explorer has caused an error and needs to restart. ... >give a share name.Also check the permissions, ... >administrators, instead, try to keep 1 or 2 ... I'm not talking about shared folders. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Log access or prevent access to private/confidential information.
    ... access to the data by asking the administrator to reset the password. ... File permissions won't help. ... >> I would like to be able to log access to my folders from the network. ... > In terms of preventing administrators or any others from accessing your ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Turn off Simple File Sharing
    ... Even in XP Pro it amazes me that in certain folders don't have Administrators granted full control. ... When you go messing with permissions it's always a good idea to pay close attention and really understand what you're doing. ...
    (microsoft.public.windowsxp.general)
  • Re: Administrator/User security issues
    ... This "Users and Administrators can control the files." ... >> i have setup all the accounts, ... >> folders for testing the security. ... >> permissions but the admin. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP Folder Ownership Problems, Permissions, Inheritances
    ... I can change the ownership of all my root folders to "Administrators". ... " Permissions", "Inheritances", Users can have certain levels of security ...
    (microsoft.public.windowsxp.security_admin)