Windows 2000 folder, files security setting did not propagate correctly?

[J.H]

Hi there,

I have 2 folders, A and B, C on Windows 2000/SP3 Domain controller
We have strange problem that when we move files:

1. 2 files from C to A, one file got security propagation of folder A,
another still has from C's
2. 2 files from C to B, the same result as above
3. 2 files from A to C, B, the same result as above
4. 2 files from B to A, C, the same result as above
Conclusion: it is very clear that security propagation is not working
correctly in this case,
any one has hints to fix this problem?

Folder A permission setting:
RMA group, Sales Group = Read & Execute
Administrator/Domain Admin/Administrators = Full
User1 = Modify
System = Full

Folder B Permission setting:
RMA group, Accounting group = Read/Execute
RMA group, Sales Group = Read & Execute
Administrator/Domain Admin/Administrators = Full
User1 = Modify
System = Full

Folder C Permission Setting:
RMA, Accounting, Sales = read/execute
Administrator/Domain Admin/Administrators = Full
User1 = Modify
System = Full

 

[J.H]

As my understanding that whatever the security setting in the destination
folder is,
it will be propagating to the files within that folder, please correct me if
i am wrong!

In this case, whenever we copy files from a folder to another folder, the
security
setting of files still have the security setting of previous folder's
instead of destination folder's.

Let say we copy 2 files (of course, we use domain admin/root administrator
to perform the
test), there are chances that 1 of 2 files will be not getting the security
setting of destination
folder.

I do not really know why it does this, but anyone can have the hint, that
appreciate!!

J.H

 

[Roger Abell [MVP]]

What you report for moving files may be correct behavior.
What you report in second post for copying should never happen.

The way things work is:
for copy: new copy should always have permissions as determined
only by the copy-to location
for move:
if between partitions behavior is same as for a copy
if within a single partition: explicit permissions of the moved are
retained, and (eventually) inherited permissions of the moved are
dropped and replaced with inherited permissions from the copy-to
location

I recommend always doing a copy and then remove the copied when
wanting to move within a partition. The default permissions due to a
move within a partition are both (usually) administratively meaningless
and also indeterminant for a period of time due to the unpredictable
delay in the replacement of the inherited permissions.

 

[J.H]

That's brilliant Roger, you are my man!! The second post that I used "cut &
paste"
not the copy.

I saw that when copying, the file was copied to location to be inheritted
the destination folder
permission setting

I saw that when cut & paste or moving file, the original permission setting
retained, and
adding up the permission setting onto the file by destination folder.

Thanks so much,
JPTH