Questions related to permissions or access rights for operating systems, filesystems, servers, or network devices.
4
votes
1answer
154 views
SQL 2005 Security - Users: What are they used for? (and other various questions)
I am not a DBA and so dont really know anything about SQL 2005 security settings, etc. I am attempting to set up an empty copy of our database by generating the full database from SQL Management ...
4
votes
2answers
1k views
Samba Public and “Dropbox” folder
I want to create a special Group Directory structure for my Users.
/home/groupA <-- home folder for groupA where every user of groupA can create/edit/delete files
/home/groupA/Public <-- ...
4
votes
2answers
460 views
zfs-fuse file permissions problems on CentOS/RHEL 5
I'm working with zfs-fuse as a way to provide filesystem compression on existing CentOS 5 servers. I'm dealing with a highly-compressible dataset (80%), so zfs-fuse comes in handy. I'm encountering ...
4
votes
2answers
2k views
How to give a user NTFS rights to a folder, via Powershell
I'm trying to build a script that will create a folder for a new user on our file server. Then take the inherited rights away from that folder and add specific rights back in. I have it successfully ...
4
votes
1answer
379 views
ESENT fails to determine the minimum I/O block size
I'm trying to get RavenDB running in embedded mode on a shared/multi-tenant webhost. RavenDB relies on the ESENT storage API. The filesystem on the hosting machines is locked down. The RavenDB ...
4
votes
2answers
1k views
built in “Offer Remote Assistance” not working because of permissions
I'm trying to enable permissions for a user on a Windows7 machine to use the built in feature called "Offer Remote Assistance" or "Windows Remote Assistance". This feature works fine if the user is ...
3
votes
7answers
2k views
security issue of Linux sudo command?
I am using a Red Hat Enterprise 5 Linux box. I find if a user is in /etc/sudoers file, then if the user run command with sudo, the user will run this command with root privilege (without knowing root ...
3
votes
6answers
416 views
Correct recursive chmod, separate for files & dirs
I'd like to recursively chmod a directory so that:
Files are 0664
Directories are 0775
How to do it better, shorter, fancier? :) Maybe, use umask somehow?
All find solutions are too long: I ...
3
votes
4answers
4k views
I have administrative rights on Windows Server 2003, so why am I denied access to a folder?
A recent attempt to upgrade a piece of software failed because it couldn't access a folder. I tried to take a look at the folder in Explorer and was told:
D:\folder is not accessible. Access
...
3
votes
2answers
125 views
Found a service which logs on using the account name “.\AccountName” - What does “.\” mean? [duplicate]
Possible Duplicate:
Is there a specific name for the “.\” (dot-slash) shorthand used to log onto a Windows machine?
I came across a server on an older windows server 2003 box today which ...
3
votes
9answers
1k views
When to grant admin rights
We always have at least one contractor on site and because they are involved in different products / technologies, different software needs to be installed on their PC's.
This takes up a lot of ...
3
votes
2answers
229 views
Recovering from a system-wide chown?
I have a Linux web server with multiple sites being hosted with CPanel.
I was having trouble accessing a site, so I ran this command:
chown -R root:root /home/evalreal/. While waiting for the command ...
3
votes
3answers
5k views
Log file permissions in Linux
I am trying to write a simple script that monitors /var/log/messages file. The file by default doesn't have read permission for users, when I allow read access to this file my script works perfectly, ...
3
votes
4answers
6k views
Allowing non-admins to run programs as admins on Windows 7
On *nix, admins can use the setuid flag to allow non-admins to run certain programs that would otherwise require admin privileges. Is there any way to do something similar in Windows 7?
This question ...
3
votes
7answers
466 views
Users as local admins on Windows machines
I am in charge of a Windows-based network of over 70 computers at work. Servers are Windows Server 2008 and workstations are Windows Vista and Windows XP.
Most users are researchers, and some of them ...
3
votes
3answers
988 views
Why is it so important to remove 777 permissions?
I'm writing installer for my PHP web app. It requires user to change permissions of a few files and directories (config.php, cache, uploads, .htaccess) to 777 (so that it's writable). I've seen in ...
3
votes
3answers
1k views
Backup data while keeping POSIX ACLs and permissions
I'm looking for a practical way to backup data from a server and keep all ACLs and permissions. I've looked at tar, but according to Google tar doesn't keep ACLs . I know rsync can keep ACLs and ...
3
votes
2answers
997 views
How can I check access of a Group/User in AD before I delete it?
I'm cleaning up an inherited domain that is not well documented. How can I check that a particular group or user has no ACEs across the AD?
Things like searching DACL/SACL for AD objects and file ...
3
votes
4answers
14k views
how do I resolve “user isn't assigned to any management roles” error in Exchange 2010 EMC?
Newly installed Exchange 2010 box (technically, a partially installed box, as this error is preventing me from completing the install).
When I launch EMC or the Management Powershell, I get this ...
3
votes
6answers
2k views
Scripts That Need (some) Root Access
I have a general question about system administration scripts that require "some" commands to be executed with root access, and other as a normal non-root user (ie myusername, etc.). I should mention ...
3
votes
2answers
3k views
file ownership for new files with administrator - why is it giving ownership to the group administrators?
I am logged in as administrator and I right click on a folder and then go to properties, then the security tab, then advanced, then the owner tab. I am not on a domain.
I see that the folder has a ...
3
votes
3answers
329 views
Any fast way to assign NTFS permissions to a folder with a very big amount of subfolders and files?
I'm trying to change NTFS permission to a folder containing a very big hierarchy below. I'm using the traditional approach (right mouse button, properties, security, etc) It's taking really long and ...
3
votes
3answers
188 views
Weird executable behaviour
I have a server machine with ubuntu 9.10.
I am trying to put in place an executable, which turns out to be the latest flashplayer (debugger version).
Somehow the file appears as present and ...
3
votes
2answers
408 views
Prevent file from being changed under Linux
What's the command under Linux to mark a file as "locked"/to prevent any changes from being made to it?
I'm not talking about chmod. There's a property that can be set (the name escapes me at the ...
3
votes
2answers
4k views
Setting Windows ACLs to allow sub-subdirectory access
We're in the process of moving some directories from NetWare to Windows, and have run into a difference of permissioning. Because NetWare makes this easy, we have whole volumes where no users have any ...
3
votes
2answers
160 views
Under which account are startup and shutdown scripts executed on Windows 7 & XP?
I'm trying to manually install and register xvid.ax and related DLLs on a bunch of Windows 7 and XP machines, which involves copying them to %windir%\system32. My attempts to effect this from startup ...
3
votes
1answer
160 views
How to give user limited active directory perms?
We are a very small company, and for some time I've been the only guy managing our domain/Active Directory. I'm NOT a sys admin, I'm a software dev, but I've done the best I could for them.
We're ...
3
votes
2answers
153 views
Allow AD user to set passwords but no other attributes
I need an Active Directory user that can set passwords of other users but only passwords and not other attributes of the users.
How can I configure that?
3
votes
2answers
2k views
Windows 2003; Find folders with non-inherited/changed permissions
The question: I'm looking for a good way to audit/search a directory structure (Windows 2003) and locate any folders that either don't inherit permissions from their parent -or- have additional ...
3
votes
2answers
344 views
Permission audit on Windows file system
We're connecting a SharePoint 2010 to our file system so it can crawl and index the files on our network. However, the files have incorrect permissions in many cases and so we need to perform a ...
3
votes
2answers
196 views
Preventing users from deleting SQL data
We just purchased a program that requires the users to have an account in the MS SQL server, with read/write access to the program's database.
My concern is that since these users will now have write ...
3
votes
3answers
140 views
Granting MySQL permissions on a specific list of servers
Suppose I have a MySQL server, and I would like to grant a set of (non-trivial) permissions to 10 users (user1, user2, ... user10), each of which may come from any of 10 different hosts that can't be ...
3
votes
4answers
3k views
Exchange 2010 Setting Room Permissions
I have just successfully created a meeting room with option Enable the Resource Booking Attendant in Exchange 2010. However, the Domain Users are not able to book the room. My understanding the option ...
3
votes
3answers
621 views
Users removing Administrator from files/folders permissions
We're running Windows Server 2003 R2 with Active Directory and are having an issue with network shares whereby users, in an attempt to secure their documents, remove everybody (including the ...
3
votes
2answers
507 views
How do I mange permissions for multiple users editing the same code on my server?
I have a server that a few different coders will be using to work on various websites. Each coder will need to have access to each website.
There's two 'clean' methods I've come up with to do this ...
3
votes
3answers
113 views
Security Dangers of Loose Permissions
To an extent, I understand the purpose of limiting permissions to just what is needed, but I don't have a complete grasp of the possible dangers of having them open. I'm most concerned with web ...
3
votes
2answers
1k views
‘noexec’ option on NTFS under Windows?
Is there equivalent filesystem option on Windows like 'noexec' mount option on Linux? Is it the same if I set "Read" permission, but unset "Read & Execute" permisson on root directory (whole ...
3
votes
2answers
236 views
What filesystem comes closest to matching NTFS for support of ACLs, and highly-granular permissioning?
It seems that most other filesystems handle the basic *nix permissions (ugo±rwx), with maybe an addition here or there. Or can be "made" to handle ACLs through the use of other tools on top of ...
3
votes
3answers
252 views
Linux Extended Permissions
What "beyond POSIX" file permissions are you using in your production/home Linux setups?
I am using SELinux through FC11. Don't really notice it apart from the violations applet in Gnome.
Does ...
3
votes
1answer
114 views
What does it mean to grant/set permissions for NETWORK SERVICE on a network share?
I'm confused about the NETWORK SERVICE account (group?) works on network shares:
On one hand, NETWORK SERVICE is generally described as an account that's local to a given machine. (See, e.g., here on ...
3
votes
1answer
3k views
Windows 2008 R2 NTFS file permissions not working as intended
We just got our first Windows Server 2008 R2 server in. It's going to be a file server. However, I am running into a weird issue with it that seems to be a result of UAC.
When I try to share a ...
3
votes
3answers
2k views
User cannot access shared printer in Windows Server 2003
I have:
A Windows Server 2003 machine acting as a file server and domain controller. Call this "Server 1".
Another Windows Server 2003 machine acting as a terminal server, file server and DNS ...
3
votes
2answers
3k views
Restrict access to IIS site to an AD Group
Is it possible in IIS to set up a site in IIS and only let users of a certain AD Group get access to it?
3
votes
1answer
823 views
Best Practices - Windows 7 Remote Road Warrior Laptop User Permissions
I'm interested in what are considered best practices when setting up laptops for remote users who are never in the office. With UAC in Windows 7, a standard user is significantly limited in what they ...
3
votes
2answers
2k views
Share screen session with users in the same group (Linux)
I can create a detached screen session using the following command:
[user1@host-pc ~]$ screen -d -m -S sname program
...and resume to it using this command:
[user1@host-pc ~]$ screen -r sname
Is ...
3
votes
1answer
670 views
Jail User to /var/www/username Directory via SSH
I have multiple folders in /var/www for different websites -- Apache uses name-based Virtual Hosts (Ubuntu Server). Suppose I want to allow someone to access their /var/www/user directory, but not cd ...
3
votes
3answers
4k views
Best way to restrict FTP access to a single directory?
I have a VPS running Ubuntu 10.04, and I'd like to give someone SFTP access to a single directory, but prevent them from seeing anything else on the system. What's the best way to pull this off?
I ...
3
votes
1answer
1k views
read write permission in root of drive c: in windows XP
What is the best way to give all users of windows XP access to create/write to files in c: drive. I do not want those permissions to be inherited to all other folders on the same drive.
This access is ...
3
votes
2answers
457 views
Setting a permission for any future file created in this directory
Hi can I make in linux any future file created in some directory, writable.
Thank you
gidi
3
votes
1answer
518 views
Undoing chmod 777
Sometimes in desperation, to test if my problem is not the permission problem I do:
sudo chmod -R 777 mydir/
In most cases it does not helps, and now I have two problems ;)
Files inside mydir/ had ...
