2
votes
0answers
27 views

Windows security: default owner configurable?

The "How owners are assigned and set" Technet article is stating: By default, a new object's owner is the security principal identified as the default owner in the access token attached to the ...
4
votes
1answer
130 views

What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?

This is a generalization of a question I initially had asked about computer accounts. I asked: When one sets Windows permissions for "Everyone", do these permissions apply to computer accounts ...
0
votes
0answers
52 views

Set ACL to allow owner to delete files in share

I have a main shares folder which has the following structure: Share->User Folder->Files I want the users to be able to add files to other users folder, but only the fodler owner to be able to ...
4
votes
2answers
815 views

Is it possible to list all permissions where I don't have access

I'm looking for a way to recursively go through my entire file share ( fairly large 3TB of files ) and list out all files/folders that I don't have access to. Due to a migration and some errors on ...
0
votes
1answer
622 views

Windows ACL during explorer copy

I need to prevent the acl subtitution during folder copy and I don't know how to do. I have two repositories, the source and the destination with different acl. Users have to copy (with windows's file ...
1
vote
1answer
259 views

Generate icacls script of permissions

I am looking for a utility to which I can specify a directory to be recursively scanned. The utility should generate a batch file consisting of calls to icacls to reproduce the file and directory ...
-1
votes
1answer
115 views

Risks of Authenticated Users group assigned by default [closed]

I have noticed that Windows seems to give all Authenticated Users powerful rights (Modify) propagated from the root of the drive. Suppose you create a folder under the root and do not adjust its ...
1
vote
0answers
213 views

ACL mask assigned when a group member creates files/directories on a Samba server from Windows effectively make them read-only

Home directories are shared by Samba running on CentOS 6.3 with the following configuration: [homes] comment = Home Directories read only = No inherit acls = Yes ...
0
votes
1answer
323 views

Windows ACL inheritance issues for FTP server and automated tools

I have set up Cerberus FTP server. By default, Cerberus FTP service runs under SYSTEM ACCOUNT. Also I have some console applications which run as scheduled tasks. They are running under a dedicated ...
6
votes
2answers
2k views

Give only Read only rights for Desktop, My document..etc via GPO

I want to accomplish the following task: A user must not have rights to save in his/her Desktop, My Documents, My Music, My video, My picture, etc. I have already prevent & hide all drives via ...
2
votes
1answer
3k views

How to map Windows ACL to Linux ones on a CIFS share?

Context We have a Windows server with an Active Directory domain and a network share. I have a Linux machine and I want to mount the share. sudo mount -t cifs //server/share /mnt/share -o ...
3
votes
2answers
611 views

Centralised Password Management Software

Currently, the company I work for has nothing in the way of password management - everything is in a big excel spreadsheet that everyone has access to. Obviously this has a whole rash of issues ...
2
votes
1answer
348 views

Samba SGID directories and delegation of privileges

What I basically want to do, is to be able to set SGID (setgid) on certain directories from Windows on Samba shares. Reminder: Files and directories created within directory with SGID set inherit the ...
5
votes
2answers
3k views

icacls granting access to all users on windows 7

I'm trying to give full access (read, write) to a specific folder to all users on Windows 7. The problem is that I don't know how to do that using icacls.
1
vote
2answers
368 views

What is the relationship (if any) between UAC and ACLs on Windows platforms?

What is the relationship between UAC and ACLs on Windows platforms? Are these two separate security schemes? Or is one a superset of the other? Intuitively I would expect them to be related but I've ...
1
vote
1answer
115 views

Delegating Windows permissions to different groups of administrators [closed]

We have some Windows servers. They are running all sorts of services, DNS, SQL Server, IIS, Oracle, etc. We want to setup a few AD groups, say DBA, WebAdmin and SAPAdmin. Then, we want to delegate ...
0
votes
1answer
2k views

How to compare/diff ACLs on two directory trees?

I have two directory trees that are supposedly copies of each other. I need to compare not the contents of files but the permissions on them. Is there a tool that will compare two dir trees but ...
2
votes
2answers
3k views

Fixing “This access control list is not in canonical form” errors from the command line

On several of our developer workstations, we've been getting the dreaded "This access control list is not in canonical form and therefore cannot be modified." error when we try and set permissions on ...
2
votes
2answers
4k views

Is there a way to create ACL's from scratch in powershell, as opposed to copying existing ones and modifying them?

I know that I can copy existing ACLs using get-acl and then modify them using set-acl, but is there a way I can create a new, blank acl and then add in what I need? For example: $foo = new-acl #push ...
2
votes
2answers
1k views

Remove invalid SIDs from filesystem ACLs in Windows

Is there an automated way to traverse a filesystem and remove any ACL entries that reference invalid SIDs in any version of Windows with NTFS?
1
vote
1answer
1k views

How to mass-reset the owner of registry keys?

After installing Crystal Reports 8 on a Windows Server 2008 machine, many ActiveX related keys have no owner set and thus it is impossible to register certain ActiveX controls on that machine ever ...
1
vote
3answers
4k views

icacls, Network Service, and setting ACLs on Windows Server 2008

Setting ACLs on Windows Server 2008 via the command line is giving me some problems. As per http://web2.minasi.com/forum/topic.asp?TOPIC%5FID=26907 I've tried all sorts of variations: ...
1
vote
6answers
308 views

Windows Filesystem Permissions Puzzle

I'm having trouble coming up with a solution to this one, maybe because I don't know enough about how Windows ACLs work. I have two folders, let's call them Directory A and Directory B. These are ...
2
votes
2answers
2k views

how to remove file auditing rules via Powershell?

here's a script to turn on an audit rule: $path = 'C:\...\*' $ACL = new-object System.Security.AccessControl.FileSecurity $AccessRule = new-object ...
22
votes
10answers
66k views

How to take ownership of files from the command line?

Every so often I run into a file that I need to take ownership of. I normally use cacls for changing ntfs permissions, but it doesn't seem to do ownership. Under *nix I would run something like ...