Permission Inheritance

[Joe]

I have conflicting information concerning permission inheritance in Windows
NT-4 environment. I do not know which is correct and was hoping someone
could clear the issue up for me.
Is this correct?
Is it " In Windows NT4 , by default, files in a folder do inherit
permissions from the parent folder, but subfolders do not inherit parent
permissions. In Windows 2000 and XP professional, the default is for the
permissions to be inherited by subfolders."

I appreciate any feedback.
Joey

 

[OShah]

I have conflicting information concerning permission inheritance in
Windows NT-4 environment. I do not know which is correct and was hoping
someone could clear the issue up for me.
Is this correct?
Is it " In Windows NT4 , by default, files in a folder do inherit
permissions from the parent folder, but subfolders do not inherit parent
permissions. In Windows 2000 and XP professional, the default is for the
permissions to be inherited by subfolders."

I appreciate any feedback.
Joey

Officially (ie. from Microsoft), inheritance is not supported in any
Windows before 2000. Period.

The inheritance feature first appeared at around Windows NT4.0 SP4 (ported
from the Windows 2000 betas).

You could download an supported tool called the security configuration
editor (SCE). The SCE replaced the NT-style security property page with
the Windows 2000 one.

However, the NT4.0 inheritance implementation was apparently rather buggy
and unstable (even the acl editor was rather broken), so Microsoft dropped
support for the inheritance mechanism in NT4.

In summary:
In Windows 2000 above, inheritance of permissions is supported. By
default, each child object will have a security descriptor that says it is
inherited.

In Windows NT4 below, inheritance is not supported. Each object has its
own security descriptor. By default, each child object will get a copy of
the parent's security descriptor.


--
------------------------------------------------------------------------
oshah [shexec32]
Control Panel -> System -> Advanced -> Error Reporting -> Choose Programs
-> Do not report errors for these programs:

Acrobat.exe
waol.exe

------------------------------------------------------------------------