empty ACL on file (?)

  • Thread starter Thread starter Jeffrey B
  • Start date Start date
J

Jeffrey B

One of our users has placed a file and a directory on a
Windows 2000 Server (SP4) file server, and absolutely
nobody (administrator, the user, etc.) can acces the
file. He copied the files from his Linux machine using
the smbclient softwware (I believe). He's done this with
other files without incident.

We've tried simple command-line tools like xcacls
and setowner, but we always get back "access denied."
Interestingly, the 'subinacl' tool doesn't work on
this computer. (All disks are dynamic disks, and I've
seen vague references suggesting that this causes
problems with subinacl.)

It looks to me as if the files may simply have empty
DACLs. Is there a readily-available tool to test this
theory and/or fix the problem?
 
I probably wasn't clear enough in my
original message. We've tried all the
"normal" procedures, and they don't work.

The Security tab doesn't even appear when
you try to look at the properties of the file
in the normal way. (Yes, this is an NTFS file
system, and the security settings look fine
for the directory that contains the problem
file and subdirectory.)

~~Jeff
 
Well, the issue is not an empty DACL.
An empty but existing DACL is defined as granting
nothing to anyone. A null pointer for the DACL in
an SD is defined as granting everyone full control.

Can you list out the permissions with such as cacls ?
Can you copy the file ? (this is getting at whether there
is a problem with characters in or the total length of
the pathname).
 
Uzytkownik "Jeffrey B said:
I probably wasn't clear enough in my
original message. We've tried all the
"normal" procedures, and they don't work.

The Security tab doesn't even appear when
you try to look at the properties of the file
in the normal way. (Yes, this is an NTFS file
system, and the security settings look fine
for the directory that contains the problem
file and subdirectory.)
Click to expand...

Did you try http://www.sysinternals.com/ntw2k/freeware/handle.shtml
or http://www.sysinternals.com/ntw2k/freeware/procexp.shtml ?

If this file was uploaded via SMBClient then I suggest
restarting the Server/Workstation services (or even
the system if it's not a big problem for you).
 
Back
Top