empty ACL on file (?)

  • Thread starter Thread starter Jeffrey B
  • Start date Start date
J

Jeffrey B

One of our users has placed a file and a directory on a
Windows 2000 Server (SP4) file server, and absolutely
nobody (administrator, the user, etc.) can acces the
file. He copied the files from his Linux machine using
the smbclient softwware (I believe). He's done this with
other files without incident.

We've tried simple command-line tools like xcacls
and setowner, but we always get back "access denied."
Interestingly, the 'subinacl' tool doesn't work on
this computer. (All disks are dynamic disks, and I've
seen vague references suggesting that this causes
problems with subinacl.)

It looks to me as if the files may simply have empty
DACLs. Is there a readily-available tool to test this
theory and/or fix the problem?
 
I probably wasn't clear enough in my
original message. We've tried all the
"normal" procedures, and they don't work.

The Security tab doesn't even appear when
you try to look at the properties of the file
in the normal way. (Yes, this is an NTFS file
system, and the security settings look fine
for the directory that contains the problem
file and subdirectory.)

~~Jeff
 
Well, the issue is not an empty DACL.
An empty but existing DACL is defined as granting
nothing to anyone. A null pointer for the DACL in
an SD is defined as granting everyone full control.

Can you list out the permissions with such as cacls ?
Can you copy the file ? (this is getting at whether there
is a problem with characters in or the total length of
the pathname).
 
Uzytkownik "Jeffrey B said:
I probably wasn't clear enough in my
original message. We've tried all the
"normal" procedures, and they don't work.

The Security tab doesn't even appear when
you try to look at the properties of the file
in the normal way. (Yes, this is an NTFS file
system, and the security settings look fine
for the directory that contains the problem
file and subdirectory.)

Did you try http://www.sysinternals.com/ntw2k/freeware/handle.shtml
or http://www.sysinternals.com/ntw2k/freeware/procexp.shtml ?

If this file was uploaded via SMBClient then I suggest
restarting the Server/Workstation services (or even
the system if it's not a big problem for you).
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top