Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows VistaWindows XPWindows MeWindows 98Windows 95Virtual PCInternet ExplorerOutlook ExpressWindows MediaSecurity
Related Topics
MS Server ProductsMS OfficePC HardwareMore Topics ...

Windows Forum / Windows XP / Security and Administration / October 2004

Tip: Looking for answers? Try searching our database.

Rights and Effective Permissions in XP Pro

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Danor - 29 Oct 2004 23:51 GMT
Im running XP Pro SP1. I have a number of volumes (NTFS) which I want to
control permissions on and am very perplexed at why thie following is
happenning.
The volume root permissions are:
(Allow) Administrator & Administrators are assigned Full Controll to This
folder, subfolders and files;
(Allow) CREATOR/OWNER is assigned Full Control to Subfolders and files

Now, when I check the Effective Permissions within Windows Explorer
(Rt-clk volume>Properties>Security tab>Advanced button)
for Adminstrators, all is good (Full Control is displayed, e.g. all boxes
are ticked).
But when I then check a specific-named Account (who *is* an Administrator
group member), NO Permissions are available (NOTHING is ticked).
How can this be?
As I understand NTFS permissions in XP Pro, Administrator(s) and Users/Power
Users are mutually exclusive (you are one or the other, not both); I assert
that the same is also true for Authenticated Users (this s/b because it is
the Authenticated Users group and Guests who make up the User group in the
first place).

So how is it that an Administrative group member is denied permissions that
Administrators have???

Signature

Patience is a virtue you exercise only when you need it... therefore,
practice every chance you get... I've had a *lot* of practice!

Bruce Chambers - 30 Oct 2004 16:59 GMT
> Im running XP Pro SP1. I have a number of volumes (NTFS) which I
> want
[quoted text clipped - 29 lines]
> therefore,
> practice every chance you get... I've had a *lot* of practice!

   If a user is a member of multilple groups, and thos groups have
differing levels of permissions, the most restrictive permissions are
those applied.

Signature

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on
having
both at once. - RAH

Danor - 31 Oct 2004 05:49 GMT
Thank you Bruce, for the reply.
I know that the "least powerful aspect of the Account is the strongest grip
on the data that it will get".  That is not an issue here.  The account in
question belongs ONLY to the Administrators group.

So, the quandary persists...

> > Im running XP Pro SP1. I have a number of volumes (NTFS) which I
> > want
[quoted text clipped - 33 lines]
> differing levels of permissions, the most restrictive permissions are
> those applied.
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.