In computing, permissions (often called "privileges," "access rights" or just "rights") are rules associated with objects on a computer or network. Permissions determine which objects can access which objects, and to what extent.

learn more… | top users | synonyms (2)

4
votes
3answers
25k views

How to run a command as administrator on Windows7 from a command line?

I need to run tscon.exe 0 /dest:console remotely = not manually on Windows7 as an administrator. More info here How to use tscon on Windows7? I did my research and OPTION 1 - runas for user ...
4
votes
2answers
5k views

Windows 2003; Find folders with non-inherited/changed permissions

The question: I'm looking for a good way to audit/search a directory structure (Windows 2003) and locate any folders that either don't inherit permissions from their parent -or- have additional ...
4
votes
3answers
273 views

Proper permissions for two developer team on PHP5 Apache Linux server

I was hoping someone could point me in the right direction regarding Linux permissions. I understand how to calculate what permissions are, understand the methodology behind changing them and can ...
4
votes
3answers
111 views

Why give owner anything other than 7 for file permissions?

In Unix-like OS's, what's the point of giving the owner of a file anything less than 7 (rwx) for file permissions? The owner can trivially change the owner permissions for his/her files, and so can a ...
4
votes
3answers
50k views

Using “Run as…” as limited user to modify network connection settings? [closed]

I'm running in a non-admin account on my development workstation, using "Run as..." for all things that need administrator privileges. Thankfully under XP even the control panel applets allow that. ...
4
votes
2answers
6k views

Has March 2015 Patch Tuesday broken 2003 shares?

We have several Windows Server 2003 boxes, and over night, they had their automatic updates installed. This morning, users cannot access shares they were previously able to, and are prompted for ...
4
votes
3answers
75 views

Server 2008 permissions issues

We have a selection of top level folders: E:\Data1 E:\Data2 E:\Data3 The permissions are simple - the default CREATOR OWNER, SYSTEM Full Control, some security groups allowing Modify and the LOCAL ...
4
votes
2answers
968 views

Write, wall, who and mesg

I want to set up a server with a lot of users so that (in order of importance): Users cannot obtain ip addresses of other users with who, or last Users can write to each other Users are able to ...
4
votes
3answers
11k views

NTFS Permissions Auditing with PowerShell

I am working on a project where I need to be able to audit various users and user group permissions on a NTFS formatted Windows file server. I would like to use PowerShell and have it recursively ...
4
votes
2answers
2k views

Subversion and mod_dav_svn: Why make www-data the owner of the files instead of root?

I've set up a dedicated Subversion server with Apache and mod_dav_svn on Ubuntu 9.10 Server, and I've got everything working fine at this point. However, I noticed that when it comes to assigning the ...
4
votes
4answers
20k views

How might I grant access to everyone's calendar in Exchange 2007?

We're considering changing our users' Outlook calendar permissions for all users so that everyone has "Reviewer" access by default. Since our users primarily use their calendars for business (and can ...
4
votes
1answer
5k views

What is the best way to fix NTFS file permissions to inherit parent?

When XP clients move files on the same volume, the permissions are moved with it. With Windows 7 clients and up, when a file is moved, the permissions are inherited. Unfortunately, we still have a ...
4
votes
1answer
939 views

How to grant permissions to Network Service to write in a remote location

I need to grant permissions to the Network Service account to write on a different machine on the same network. Can you tell me which permissions I should add? Thanks! EDIT From ...
4
votes
2answers
294 views

Fixing Users and Computers accounts structure in Active Directory

I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy. When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users ...
4
votes
2answers
2k views

Denied root access to user mounted FUSE file system

Let me start with giving you the details of my setup: I am running Fedora 13 on an x86_64 arch. I have mounted a remote directory using sshfs: jim@localsite $ sshfs jim@remotesite:/home/jim ...
4
votes
5answers
10k views

Add group rwx permissions to a folder

I have a folder named docs, how do I add rwx permissions for group devs to docs? I tried: chmod -R g+rwx docs but I don't know where to specify that it's the devs group I want to grant permissions ...
4
votes
2answers
4k views

How to prevent ssh git push to set file ownership?

I have a remote bare Git repository on an Ubuntu server, where the files are owned by the user my_project and the group my_project, with permissions set accordingly. All commiters are themself in the ...
4
votes
2answers
3k views

Different NTFS Permission on subfolders

I have on our server a folder for each client. Inside that folder there are subfolders for each project that belongs to that client. My problem is that different resources in the company handle the ...
4
votes
1answer
220 views

Tool to see nested permissions?

Here's the situation. Often I need to tell how a user is getting access to a specific folder. I can see in "Effective permissions" that they have read/write/etc, but because of nested groups I can't ...
4
votes
1answer
2k views

Best Practices - Windows 7 Remote Road Warrior Laptop User Permissions

I'm interested in what are considered best practices when setting up laptops for remote users who are never in the office. With UAC in Windows 7, a standard user is significantly limited in what they ...
4
votes
2answers
4k views

Share screen session with users in the same group (Linux)

I can create a detached screen session using the following command: [user1@host-pc ~]$ screen -d -m -S sname program ...and resume to it using this command: [user1@host-pc ~]$ screen -r sname Is ...
4
votes
2answers
1k views

Vista Failure Auditing

I need to meet government security requirements in order to ship my product. Here is specific requirement I am trying to meet: Group ID (Vulid): V-1080 Group Title: File Auditing ...
4
votes
3answers
134 views

How to forbid drag'n drop for a Windows XP folder?

Some of users here sometimes mistakenly drag'n drop a folder. Is it possible to forbid them to move and rename a folder? They are all using Windows XP. The folder is on the network. They should be ...
4
votes
2answers
686 views

Setting a permission for any future file created in this directory

Hi can I make in linux any future file created in some directory, writable. Thank you gidi
4
votes
1answer
741 views

Undoing chmod 777

Sometimes in desperation, to test if my problem is not the permission problem I do: sudo chmod -R 777 mydir/ In most cases it does not helps, and now I have two problems ;) Files inside mydir/ had ...
4
votes
3answers
94 views

What extra permission settings were added in Windows Server 2003 over Windows Server 2000?

We have a domain controller currently running Windows Server 2000, and we're in the process of upgrading some of our workstations to Windows 7. The problem is that users are getting access denied ...
4
votes
3answers
241 views

Permissions for shipping SQL Server 2005 transaction logs

I'm trying to ship transaction logs from Server A to Server B. I keep getting permission denied errors when the agent tries to run because it isn't using the right credentials to connect to the backup ...
4
votes
2answers
1k views

crontab listing or editing results in fopen: permission denied

Recently, a job configured to run from a user's crontab stopped executing. When attempting to list or edit the crontab for the user, the result is: user@host:~$ crontab -l crontabs/user/: fopen: ...
4
votes
2answers
818 views

What are the minimum permissions for a Windows share to be anonymous-read only?

I am in the long and arduous process of resolving my confusion over Windows permissions, and would love to get some clarity over the following. I would like to provision a Windows share such that any ...
4
votes
3answers
2k views

How do I configure active directory when Sql Server 2012 is using a Virtual Account?

I'm getting the following event log entry from Sql Server 2012: SQL Server Scheduled Job 'Replication agents checkup' - Status: Failed - Invoked on: 2012-08-04 10:00:00 - Message: The job failed. ...
4
votes
2answers
273 views

Workaround for mounting a filesystem to a local directory without elevated privileges on Linux

I've got an ext3 filesystem sitting in a file, and I'd like to mount it to a local directory without sudo or any elevated permissions. Why? I'm creating a small filesystem for automated testing ...
4
votes
2answers
4k views

RSync over SSH - permission denied even though the user is in the root group

I have a need to copy files between servers through the web. I'm using RSYNC over ssh to do so. The problem is, I need to be able to transfer files, no matter where the files is. I created a user ...
4
votes
1answer
6k views

“debug1: read_passphrase: can't open /dev/tty: No such device or address” when trying to connect through SSH

I am trying to connect to my server using ssh user@server.com -vv I get debug1: read_passphrase: can't open /dev/tty: No such device or address error or just Permission denied, please try ...
4
votes
1answer
3k views

How to make all new files in the directory be owned by the particular user?

I want all the files in /var/www directory be owned by nginx.devel. I have performed chmod once and update these files using rsync. But if I create a new file and then rsync it, it will be owned by ...
4
votes
2answers
122 views

How should privileged accounts be secured in both Linux and Windows?

I have recently started work in application security at a mid-sized firm, having transitioned away from 5+ years in security consulting (pentesting, etc). One of the biggest challenges I see here from ...
4
votes
1answer
296 views

What exactly is included in the Windows “Everything” security identifier (e.g. does it include computer accounts like DOMAIN\MACHINE$)?

This is a generalization of a question I initially had asked about computer accounts. I asked: When one sets Windows permissions for "Everyone", do these permissions apply to computer accounts ...
4
votes
1answer
401 views

Still confused by Permissions - linux, nginx, php-fpm

I have read the canonical answer at What are the best linux permissions to use for my website? However I'm still stuck. My setup is: A developer user 'ade' who owns the directories and files that ...
4
votes
2answers
1k views

wkhtmltopdf call from PHP exec results in exit code 127 failure

Using CentOS 6.3x64. I'm trying to run wkhtmltopdf (from here) from a PHP script. I can successfully call wkhtmltopdf-amd64 directly via SSH. But when calling it from PHP via exec, it always fails ...
4
votes
1answer
2k views

Why can't I copy .zip files from a server to a server in a different domain?

At work, we're using a Windows Server 2008 R2 VM as our build server. At the end of the build process for any of our projects, we copy the packaged deployment files to a folder on the server where ...
4
votes
2answers
1k views

MS SQL access to restored database without sysadmin role

I have databases from different projects on one server. I can't give all developers administrative (sysadmin) access to the databases. They have to have the permissions needed to create and restore ...
4
votes
5answers
6k views

Domain Admins group denied access to d: drive

I have a brand new Active Directory (CORP-AD) installation running on Windows 2008R2. I have a domain controller (PDC01) and a member server (ME01). The member server has a C: and a D: drive. Part ...
4
votes
4answers
733 views

Apache LAMP permisson issues on Ubuntu server

I have been trawling the internet for a few days now and think I've tried almost everything to get some virtual hosts set up on my Ubuntu server but everything short of chmod 777 on the webroot fails. ...
4
votes
2answers
3k views

Samba Permissions - I'm going to throw it!

I'm attempting to set up a samba share on my Ubuntu 8.04 LTS box, to be consumed by my mac and windows clients. I've created a 'samba' group and added my linux users to them, gave them samba ...
4
votes
3answers
8k views

Proper setup of user permissions for OpenSSH on Windows?

I am trying to setup OpenSSH on Windows to provide SFTP sites. I am running into some problems with user security settings. Here are the basic steps I've gone through to create a user: Create a ...
4
votes
1answer
54 views

What is this user name for and how did it get created?

When I created a website named Portal on my IIS 7.5 on the website permissions->security I got this user. What is its purpose? From what I have read the ApplicationPool runs under NetworkService ...
4
votes
1answer
1k views

Running a service with a user from a different domain not working

I've been stuck on this for a while, not sure what permission I'm missing. I've got domain A and domain B, A trusts B, but B does not trust A. I'm trying to run a service in domain A with a user ...
4
votes
2answers
795 views

setfacl equivalent to chmod for setting/unsetting individual flag

Using setfacl command line arguments, is there a way to set/unset a single flag as the following command will do ? chmod g+x FILE Please note that: setfacl g::x FILE setfacl g::--x FILE are ...
4
votes
1answer
2k views

Share Point ACL on OSX Lion Server - Posix group always takes over ACLs

Trying to configure a share point on a Lion Server machine. The directory is created by the local server admin (serveradmin) and has rwxr-x--- given to it. The serveradmin user belongs to the local ...
4
votes
1answer
914 views

Default file permissions when copying from Windows share to OS X

I have an issue that I haven't been able to find an answer for. I have a handful of Mac designers here that started using a program called Articulate to generate flash objects to embed on our ...
4
votes
2answers
3k views

Linux acls uses wrong gid for domain groups, but numerical gids ok

Please see edit below, as it turns out that the problem is with uid/gid to sid mapping and shows a workaround that will help understand the problem more quickly. We have a Ubuntu 11.04 server ...