Bypass Traverse Checking question

[robert]

One of the User Rights Assignments in the Local Computer
Policy > Computer Configuration > Windows Settings >
security settings > Local policies > User rights assignment
IS: Bypass Traverse Checking.

The 2000 resource kit describes this right as :
"Allows the user to pass through directories to which
the user otherwise has no access, while navigating an
object path in any Windows file system or in the registry.
This privilege does not allow the user to list the contents
of a directory, only to traverse directories."

Problem is - I have a file in userX 's profile directory
subfolders that I have given userY access to. But as
soon as userY attempts to open userX's profile folder
he gets an Access error "C:\Documents and Settings\userX
is not accessible . Access is denied".

So why can userY NOT traverse userX's directories to get to
the file in a subfolder that has a file for which userY has access?
The 'bypass traverse checking' Right is for both the 'everyone'
and 'users' group . robert

 

[robert]

uhhhhh - sorry ..it actually does work - it
helps to put the right extension on the target file .
So yes i was able to enter the path in the run key and
open the file. However, you apparently cannot drive
to the file via double clicking through the gui folders -
because - then- you do get the NO ACCESS message.
ONLY seems to work via the run key and entering
the complete path to the file robert