User Permissions Issues

[tomasga]

I have a problem where when a user of mine creates a folder the permissions for that folder are not inherited from the parent by default all the time, sometimes it is and sometimes it is not, this is very peculiar to me. I have Windows 2000 Server with SP4.

any ideas?

 

[Herb Martin]

I have a problem where when a user of mine creates a folder the

permissions for that folder are not inherited from the parent by default all
the time, sometimes it is and sometimes it is not, this is very peculiar to
me. I have Windows 2000 Server with SP4.

[Please don't use HTML or other rich text when posting
to newsgroups -- it makes it harder to respond and some
people, or sometimes all of us, will just hit delate when
we see this...]

This part is unclear:
"not inherited from the parent by default"

Do you just mean "not inherited" or by something (like
a user you consider "default")?

Inheritance is the default IF you use normal tools/procedures
to create the parent directory permissions.

It is however possible to create a parent directory
with one set of permissions for itself, another for
children objects -- even different ones for both child
files and child directories.

Have you perhaps some odd permissions on the parent?

 

[tomasga]

I have checked the permissions on the parent folder and all seems correct.
This only happens when this specific user creates subfolders within the
directory structure and then adds files to it.

This is also not a constant issue, it does not always happen,

she could add file a and b, if you were to look at the rights for both files
you might see that file "A" has 4 full access users allowed to it but file
"B" only has 3 users listed

--
TOMAS GARCIA

I have a problem where when a user of mine creates a folder the

permissions for that folder are not inherited from the parent by default all
the time, sometimes it is and sometimes it is not, this is very peculiar to
me. I have Windows 2000 Server with SP4.

[Please don't use HTML or other rich text when posting
to newsgroups -- it makes it harder to respond and some
people, or sometimes all of us, will just hit delate when
we see this...]

This part is unclear:
"not inherited from the parent by default"

Do you just mean "not inherited" or by something (like
a user you consider "default")?

Inheritance is the default IF you use normal tools/procedures
to create the parent directory permissions.

It is however possible to create a parent directory
with one set of permissions for itself, another for
children objects -- even different ones for both child
files and child directories.

Have you perhaps some odd permissions on the parent?


--
Herb Martin


any ideas?

 

[Herb Martin]

I have checked the permissions on the parent folder and all seems correct.
This only happens when this specific user creates subfolders within the
directory structure and then adds files to it.

It's not that simple How did you check?

Unless the tool shows you the 3 possible sets you
cannot really tell.

This is also not a constant issue, it does not always happen,

Maybe inheritance is disabled (checkbox) at an intermediate
level, i.e., Disable Inheritance.

she could add file a and b, if you were to look at the rights for both files
you might see that file "A" has 4 full access users allowed to it but file
"B" only has 3 users listed

--
Herb Martin

--
TOMAS GARCIA

I have a problem where when a user of mine creates a folder the

permissions for that folder are not inherited from the parent by default all
the time, sometimes it is and sometimes it is not, this is very peculiar to
me. I have Windows 2000 Server with SP4.

[Please don't use HTML or other rich text when posting
to newsgroups -- it makes it harder to respond and some
people, or sometimes all of us, will just hit delate when
we see this...]

This part is unclear:
"not inherited from the parent by default"

Do you just mean "not inherited" or by something (like
a user you consider "default")?

Inheritance is the default IF you use normal tools/procedures
to create the parent directory permissions.

It is however possible to create a parent directory
with one set of permissions for itself, another for
children objects -- even different ones for both child
files and child directories.

Have you perhaps some odd permissions on the parent?


--
Herb Martin


any ideas?

 

[Steven L Umbach]

Is the creator owner present in the parent folder? If it is the user who creates a folder will be assigned permissions assigned to creator owner. Check the folders where this is happening to versus the ones where it is not to see who is the owner in properties/security/advanced/owner. Also check your advanced permissions to see if they are what you expect. --- Steve
I have a problem where when a user of mine creates a folder the permissions for that folder are not inherited from the parent by default all the time, sometimes it is and sometimes it is not, this is very peculiar to me. I have Windows 2000 Server with SP4.

any ideas?

 

[Herb Martin]

Is the creator owner present in the parent folder? If it is the user who

creates a folder will be assigned permissions

assigned to creator owner. Check the folders where this is happening to

versus the ones where it is not to see who is >the owner in
properties/security/advanced/owner. Also check your advanced permissions to
see if they are what you >expect. --- Steve

While an absolutely great idea for shared directories, creator/owner
has nothing to do with whether parent permissions are being inherited
by a child object.

Again, assigning creator/owner permissions IS useful and
most people don't recognize the value/need for this.

 

[Roger Abell]

Are you sure that files A and B are being defined in the
same way? A file copied into a folder and another that
is moved into that same folder from a location in the same
partition are expected to have different permissioning.

If this, differences in how the files come to be in the folder,
does not explain what you are seeing, then post the output
from running
cacls <full directory pathname>
so that we can see what permissions are set on the folder.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA

I have checked the permissions on the parent folder and all seems correct.
This only happens when this specific user creates subfolders within the
directory structure and then adds files to it.

This is also not a constant issue, it does not always happen,

she could add file a and b, if you were to look at the rights for both files
you might see that file "A" has 4 full access users allowed to it but file
"B" only has 3 users listed

--
TOMAS GARCIA

I have a problem where when a user of mine creates a folder the

permissions for that folder are not inherited from the parent by default all
the time, sometimes it is and sometimes it is not, this is very peculiar to
me. I have Windows 2000 Server with SP4.

[Please don't use HTML or other rich text when posting
to newsgroups -- it makes it harder to respond and some
people, or sometimes all of us, will just hit delate when
we see this...]

This part is unclear:
"not inherited from the parent by default"

Do you just mean "not inherited" or by something (like
a user you consider "default")?

Inheritance is the default IF you use normal tools/procedures
to create the parent directory permissions.

It is however possible to create a parent directory
with one set of permissions for itself, another for
children objects -- even different ones for both child
files and child directories.

Have you perhaps some odd permissions on the parent?


--
Herb Martin


any ideas?

 

[Steven L Umbach]

It might explain why the user is not seeing permissions applied to a file or
folder that he expects based on the user's group membership in the parent
folder. Of course it is very hard to tell exactly what is going on based on
his description. --- Steve