Strange NTFS Permissions

R

Rodrigo

Hi, I have a Windows 2000 server and I am experiencing some strange behavior
with c:\documents and settings\all users\documents\drwatson NTFS directory
permissions.

Clicking in properties/security/permissions, I get the following: Everyone
Fullcontrol
Clicking in advanced, I get nothing listed at all, the tab is EMPTY

"cacls drwatson" returns an empty string

Is that possible? Advanced tab EMPTY while Standard permissions show
Everyone: FULL CONTROL?

After a few tests I realized that the actual permissions of the directory
are Everyone FULL CONTROL.
 
R

Roger Abell [MVP]

I have not experienced what you report, but you may find interest in
the fact that an empty DACL in a security descriptor (SD) differs from
a SD with a null DACL.

A null DACL is a grant of Everyone Full Control.
An empty DACL is an absence of any grants (or denies)

These are the history semantics for early NT times, and by the way
one of the origins for much of MS's probematic legacy (i.e. developers
would just pass a null for the SD parameter, resulting in grants of Everyone
Full Control all over the place).

So, while I have not seen what you are reporting, it does make sense
because the initial NTFS permissions dialog, unlike the detailed Advanced
view, is presenting presenting a view of the generic rights. Perhaps your
directory did somehow become ACL'd with a null DACL.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top