NTFS Permissions allowing one to RUN APPLICATIONS

[Guest]

Which NTFS permissions allow users to run applications?

Modify (yes)
Read and Execute (yes)
Full Control (yes)
Write (No)

It appears that WRITE alone would not allow a user to run applications. Can
anyone cite resource to support (or disprove) this and why? Thanks!

 

[Shenan Stanley]

Which NTFS permissions allow users to run applications?

Modify (yes)
Read and Execute (yes)
Full Control (yes)
Write (No)

It appears that WRITE alone would not allow a user to run
applications. Can anyone cite resource to support (or disprove) this
and why? Thanks!

Read and Execute is usually all that is needed.
Anything else may be on a few files for the application - but not the
executable itself.

(Why would you think "WRITE" would allow anyone to EXECUTE an application?)

http://www.experts-exchange.com/Security/Win_Security/Q_21586050.html

HOW TO: Set, View, Change, or Remove File and
Folder Permissions
http://support.microsoft.com/kb/308418

HOW TO: Set the My Documents Folder as Private in Windows XP
http://support.microsoft.com/kb/298399

HOW TO: Set, View, Change, or Remove Special Permissions
for Files and Folders
http://support.microsoft.com/kb/308419

 

[Guest]

(Why would you think "WRITE" would allow anyone to EXECUTE an application?)

I don't. I was challenged by another MCP who stated that "All four choices
(above) allow the running of applications. The only permission that doesn't
is READ, which is not one of the choices." He even went on to cite a support
reference for his opinion (Windows XP Help: Setting Permissions). I wanted
outside/expert opinion on this.

I also just confirmed this by assigning only the WRITE permission to a
folder for "Guests" and the "effective permissions" for "Guests" are: Create
Files/ Write Data, Create Folders / Append Data, Write Attributes, Write
Extended Attributes. WRITE does not include "Traverse Folder/ Execute File".

Thank you very much Shenan for getting back so quickly and for your
confirmation. If you have any further thoughts/advise on this please let me
know and I will pass them on.

Regards,


/s/Norman A. Levinson, MCSE, CCNA, CWSP

 

[Martin C]

Probably another reason you would want to have WRITE permissions on a folder
is for a games folder where you would want to save any current games in
progress. This is a problem that I have been having. Users on an XP Home
machine cannot run the games or save anything without permission changes.

Martin