File Permissions keep REVERTING! HELP!

[fa32 at netcaliber dot com]

I know there is a simple answer to this but I've pulled my hair out
trying to figure it out. I'm admin for a local non-profit school. We
have a Windows 2000 Server as DC of an Active Directory domain.
Clients are all Windows XP Pro workstations. Some software the
teachers need to use does not play right without special local file
permissions so I added the Teacher user to the security settings of
the folder in question with MODIFY permissions. I do this on 3
specific machines. To this point everything works great...the
software starts happily.

At some point, however, the permissions revert to what they were
before...the Teacher user disappears from the listing in the Security
tab for NTFS permissions on the folder in question.

I've tried this over and over again and same thing happens. When we
installed the domain we installed security templates for the
workstations....could this be causing the problem? Is Active
Directory "repairing" directories? PLEASE HELP!!!!

 

[Guest]

I'm a novice to this forum, but I would reccommed checking which group policies are being inforced on the particular workstations you are having trouble with. you can check with GPO have been applied by loggin in as a teacher account and running GPRESULT. I would then check your login/logout and startup/shutdown scripts

I'm not real familiar with software restrictions, but perhapps???? also, if the application in question was assigned through group policy, it's possible that the installation package is being run at logon, thus overwriting the file and resetting the permissions. I don't see how that could happen with a .msi but it would fit the symptoms described

Again, don't take this as the only solutions, just thought I use this opportunity to start posting

 

[Mark Ramey]

This very well could be a policy that is resetting the permissions on the
files and folders. As a test you can reset the permissions to the desired
settings then open a command prompt and type in

gpupdate /force

to force a refresh on the XP boxes. Then go back and verify the permissions
settings on the files and folders. If they changed back to the old settings
you have a policy applying from somewhere that is causing the problem. Check
the gpresult or the local policy for any settings under the Computer
Configuration\Windows Settings\Security Settings\File System.

Mark

 

[fa32 at netcaliber dot com]

That was the problem! Thank you very much!

This very well could be a policy that is resetting the permissions on the
files and folders. As a test you can reset the permissions to the desired
settings then open a command prompt and type in

gpupdate /force

to force a refresh on the XP boxes. Then go back and verify the permissions
settings on the files and folders. If they changed back to the old settings
you have a policy applying from somewhere that is causing the problem. Check
the gpresult or the local policy for any settings under the Computer
Configuration\Windows Settings\Security Settings\File System.

Mark