File permission propagation

  • Thread starter Thread starter Chris Hills
  • Start date Start date
C

Chris Hills

Hi

I have a situation in which folders in a tree have supposedly inherited
certain permissions which they should not have. The structure looks like
this:-

C:\
Disks\
D1300\
Disk 2\
Partition 2\ [M]
u12345\

[M] = mounted partition

On the folder u12345\ the following permissions show (Name,Inherited From):-

Administrators,Parent Object
SYSTEM,C:\Disks\D1300\Disk 2\Partition 2\
Joe Bloggs,C:\Disks\D1300\Disk 2\Partition 2\
CREATOR OWNER,Parent Object
Users,Parent Object

On the folder Partition 2\ the following permissions show
(Name,Inherited From):-

CREATOR OWNER,<not inherited>
Domain Admins,<not inherited>
DOM-LS-Group1,<not inherited>
SYSTEM,<not inherited>

On the folder Partition 2\ I have made sure that "Allow inheritable
permissions from the parent..." is unselected.

The folders underneath Partition 2\ are set as home folders on the
domain and are automatically created. I would like to find out where the
"Users" permission on these folders is being inherited from because as
far as I can tell it should not be there.

Regards

Chris
 
Chris Hills wrote:
> Hi
>
> I have a situation in which folders in a tree have supposedly inherited
> certain permissions which they should not have. The structure looks like
> this:-
>
> C:\
> Disks\
> D1300\
> Disk 2\
> Partition 2\ [M]
> u12345\
>
> [M] = mounted partition
>
> On the folder u12345\ the following permissions show (Name,Inherited From):-
>
> Administrators,Parent Object
> SYSTEM,C:\Disks\D1300\Disk 2\Partition 2\
> Joe Bloggs,C:\Disks\D1300\Disk 2\Partition 2\
> CREATOR OWNER,Parent Object
> Users,Parent Object
>
> On the folder Partition 2\ the following permissions show
> (Name,Inherited From):-
>
> CREATOR OWNER,<not inherited>
> Domain Admins,<not inherited>
> DOM-LS-Group1,<not inherited>
> SYSTEM,<not inherited>
>
> On the folder Partition 2\ I have made sure that "Allow inheritable
> permissions from the parent..." is unselected.
>
> The folders underneath Partition 2\ are set as home folders on the
> domain and are automatically created. I would like to find out where the
> "Users" permission on these folders is being inherited from because as
> far as I can tell it should not be there.

After looking around, I found out that the partition itself had its own
set of security permissions, which are not the same as those shown on
the folder at the mount point. However, in addition to the "Users"
entry, there was also an entry for "Everyone", but that did not show up
on the folder u12345\. How bizarre. I removed the permission for "Users"
from the partition and I observed that it was no longer inherited.
 
Back
Top