NTFS permissions mysteriously changing

  • Thread starter Thread starter Tim Oliwiak
  • Start date Start date
T

Tim Oliwiak

We are experiencing a strange occurance on our network.

In order for users running Windows 2000 to be able to view
documents (PDF +PPT) off our intranet, we have to change
the security settings on the "Temporary Internet Files"
folder for the Users group from "read" to "modify". Once
that is done, the users can view the files.

However, within a day or two, the permissions for the
Users group have switched back from "modify" to "read".

This is happening on a couple of dozen PCs. All of them
running Windows 2000.

Does anyone have any suggestions?
 
Tim said:
We are experiencing a strange occurance on our network.

In order for users running Windows 2000 to be able to view
documents (PDF +PPT) off our intranet, we have to change
the security settings on the "Temporary Internet Files"
folder for the Users group from "read" to "modify". Once
that is done, the users can view the files.
Click to expand...

Hmmm - as far as I know users have modify permissions to their temporary
internet files folder by default. Otherwise they wouldn't be able to even
create them. Had you changed this in a policy?
 
Hmmm - as far as I know users have modify permissions to
their temporary
internet files folder by default. Otherwise they wouldn't be able to even
create them. Had you changed this in a policy?
Click to expand...

Unfortunately I can't find the KB articles to back this
up, but I seem to recall that there was a version of IE
that only gave Users the read permission on the Temporary
Internet Files folder because it was located in the WINNT
folder (I know, doesn't make sense to me either). I could
be way off though, because it was a long time ago.

Our network administrator is away this week, but I looked
through the domain group policy and I couldn't find
anything significant.
 
Unfortunately I can't find the KB articles to back this
up, but I seem to recall that there was a version of IE
that only gave Users the read permission on the Temporary
Internet Files folder because it was located in the WINNT
folder (I know, doesn't make sense to me either). I could
be way off though, because it was a long time ago.
Click to expand...

Temporary Internet files aren't in C:\winnt - they're in the user's profile
folders by default.
 
Temporary Internet files aren't in C:\winnt - they're in
the user's profile
folders by default.
Click to expand...

On our XP machines, it is in the users profile. However,
on our W2K machines, the folder is in WINNT.
 
Try logging in as the user(s) in question, browse to
their roaming profile on the server and take full
ownership and reset permissions on all child objects in
their profile.

Another thing, are all machines completey up to date?
 
Tim said:
On our XP machines, it is in the users profile. However,
on our W2K machines, the folder is in WINNT.
Click to expand...

Hmmm. Were these upgraded?
You can move it, you know - per user. Control panel, internet options,
temporary internet files, settings.
 
-----Original Message-----
Try logging in as the user(s) in question, browse to
their roaming profile on the server and take full
ownership and reset permissions on all child objects in
their profile.

Another thing, are all machines completey up to date?
Click to expand...

We are not using roaming profiles. They are local.

Up to date? Well, they all have SP4, they may or may not
be up to date with post-SP fixes, i haven't looked into
that yet.
 
Temporary Internet files aren't in C:\winnt - they're in
the user's profile
folders by default.
Click to expand...

Here is a bit more info:

Some of our W2K PCs have a Temporary Internet Files folder
inside WINNT *AND* inside each users personal profile.

The rest of our W2K PCs only have a Temporary Internet
Files folder inside each users personal profile, and NOT
inside WINNT.

The problems we are experiencing are with the PC that have
Temporary Internet files in both locations.
 
Back
Top