NETWORK SERVICE must be granted READ access.

Signature
Alan Ludwig
Lead Software Development Engineer
Windows Core Operating System
Microsoft Corp.
This posting is provided "AS IS" with no warranties, and confers no rights.
Thanks. I also noticed that the file did not inherit its permissions for its
parent. Once I check that box in the security tab it was granted NETWORK
SERVICE read access. How could an application create a file and not have it
inherit permissions from its parent?
> NETWORK SERVICE must be granted READ access.
>
[quoted text clipped - 12 lines]
> > thanks,
> > -chris
Alan Ludwig - 24 Dec 2005 03:42 GMT
Yup, that is exactly the problem. There are a few programs out there that
don't set the permissions correctly on the file. If the file is just set to
inherit permissions from the parent folder then everything will work.
How can a file not inherit permissions from the parent? By setting the
wrong permisions in the lpSecuirtyDescriptor member of the
lpSecurityAttributes parameter to CreateFile. The documentation for
CreateFile is found here:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/fileio/fs/creat
efile.asp
If you just pass "NULL" in for this parameter to create file everythign
works right. My guess is that the programs are trying to be a bit more
clever and are actually building up a DACL and aren't including the "Inherit
Permissions" bit in the DACL.
Regards,

Signature
Alan Ludwig
Lead Software Development Engineer
Windows Core Operating System
Microsoft Corp.
This posting is provided "AS IS" with no warranties, and confers no rights.
> Thanks. I also noticed that the file did not inherit its permissions for
> its
[quoted text clipped - 25 lines]
>> > thanks,
>> > -chris