Re: NTFS Security Question.

Hmm. You might also check the advanced page for special permissions and
remove the two special permissions for users there for creating folders and
files to see if that makes a difference. It should work just by making sure
users do not have write permissions which is an implicit deny. If you are
testing with a user account that you changed group membership on make sure
you logoff as that user so that the new logon will reflect changes in group
membership.

Steve


"Wiley Coyote - N2K" <mits_mvp@xxxxxxxx> wrote in message
news:%23gzxRgWxGHA.2448@xxxxxxxxxxxxxxxxxxxxxxx
I believe I posted this in the WRONG post - oops.

So:

I have set NTFS perms on the Root of my system volume to EVERYONE: Deny
Write. Yet, I can still create folders and files! I've been an SE for a
longggg time and never saw this before. The perms are at the Root, so
there
is nothing to inherit.

This acount that I am using is NOT a member of any supernumery group,
just
a plain Jane user account. I logged in with admin rights to check the NTFS
perms and all seems to be OK as follows:

System: CHANGE (not FC),
Everyone Read & Exec, List, Read ((Deny Write),
C.O. : nada,
Administrators: Change,
Users: Read & Exec, List, Read (Deny Write)

One of the reasons for this level of security is to prevent certain web
sites from dropping VB apps in the root and other silly things.

Anyway, just curious as to why I can (as an ordinary user) do this.

If anyone know what is happending that would be good.

Thanks.





.

Relevant Pages

  • Cant Access folders
    ... I recently set Special permissions on a folder and its subfolders to Deny ... Now I can't add a group and can't access the folders. ...
    (microsoft.public.windows.server.networking)
  • Re: Folder NTFS Permissions
    ... As long as they have the permission to create folders in the target ... You could use special permissions to deny ... and subfolders in the "apply onto" box for special permissions. ... files and once for folders and subfolder as an example with different ...
    (microsoft.public.win2000.security)
  • Re: NTFS Security Question.
    ... I was not sure that deleting the special permissions would work but you ... Since Windows 2000 deny NTFS permission does not work ... originally configured "closer" to the object in the chain of folders. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Folder security in XP Pro
    ... Mr. Chambers, ... But I'm having a problem not answered in the MSDN, Windows Help ...
    (microsoft.public.windowsxp.security_admin)
  • Re: documents and settings security
    ... idea of giving everyone full control seems way excessive to me and not ... By default a regular user can create folders in the root folder.if ... The second link below explains more on special permissions. ... But what also happened is the documents and settings got ...
    (microsoft.public.windowsxp.security_admin)