Skip to main content
13 votes

Why does Windows process all NTFS child objects when changing a parent’s ACL?

Any child object that is configured to inherit it’s permissions from the parent object will need to be processed. Explicitly defined permissions on the child objects are not affected. The option, “...
Appleoddity's user avatar
  • 3,860
11 votes
Accepted

Why does Windows process all NTFS child objects when changing a parent’s ACL?

In Windows file permissions are not dynamically inherited. That is, when an attempt is made to open a file Windows only looks at the ACL of that file and not at the ACLs of the directories in the tree ...
John Rennie's user avatar
  • 7,796
10 votes

I have a NTFS partition now the size of the partition seems to be wrong. Is there an easy way to fix this?

There is another scenario that is common if you clone your HDD to a larger one OR if you have a VPS/Virtual Server and resize the disk what happens is that usually the partition will remain the same/...
Areeb Soo Yasir's user avatar
10 votes

Overcoming maximum file path length restrictions in Windows

Microsoft now has an available fix for this beginning with Windows 10, which is explained in the Naming Files, Paths, and Namespaces MSDN article. darthcoder already answered with details on the \\?\...
JimNim's user avatar
  • 2,796
9 votes
Accepted

How can I use PowerShell to enable NTFS compression, in place, on log files older than x days?

The easiest solution, as PowerShell support for file operations is still rather lacking, is to create a PowerShell script to call the compact.exe utility and set it up as a scheduled task. Because of ...
HopelessN00b's user avatar
8 votes

Rsync command to synchronize two NTFS drives?

To rsync between Linux ext4/xfs and windows ntfs mounts OR To rsync between two ntfs mounts : If the intent is to back-up the contents to ntfs mount using rsync and only transfer delta to ntfs ...
Raman Kathpalia's user avatar
8 votes
Accepted

Is SMB safer than iSCSI for connection to a NAS?

Any online writable disk can be corrupted by a malicious software or user. Underestimating them by assuming they cannot find a file share is a mistake. Last line of defense for important data is ...
John Mahowald's user avatar
7 votes
Accepted

What are $Extend\$Deleted file system entries and how do I get rid of them?

I ran into the $Extend\$Deleted folder as well and have been combing the web for information. I'm not entirely satisfied with this answer, but here is what I found: While $Extend has been around for ...
David Mackey's user avatar
7 votes
Accepted

File Share in Windows Domain

My understanding is that you assign a user to a (security) group and then add that group to the NTFS permissions. However, we have a number of folders where we need to give a specific user access ...
joeqwerty's user avatar
  • 111k
7 votes

Is SMB safer than iSCSI for connection to a NAS?

Leaving the question of iSCSI vulnerability when using it without a clustered file system but with multiple initiators aside, I can hardly find any clear reason why file sharing protocol would be more ...
batistuta09's user avatar
  • 9,126
6 votes

How to delete a file with a space at end of the name and hidden attributes?

write \\?\ Before Absolute Path of file with the space at end. del "\\?\D:\MyPath\MyFile " /S Read more here: Click here for: Very good information page about Windows command DEL
PatxiRB's user avatar
  • 161
6 votes

Get the Allocation Unit Size from NTFS disk

Now that powershell has caught up and has fledged out a little bit you can run this code in a powershell window: Get-Volume | Format-List AllocationUnitSize, FileSystemLabel
SQLing4ever's user avatar
6 votes
Accepted

Sluggish performance on NTFS drive with large number of files

The server did not have enough memory. Instead of caching NTFS metafile data in memory every file access required multiple disk reads. As usual, the issue is obvious once you see it. Let me share what ...
Paul B.'s user avatar
  • 313
6 votes

How can I use PowerShell to enable NTFS compression, in place, on log files older than x days?

The repeated code can be avoided by using an array and a foreach loop: $logfolders=("D:\Folder\One","D:\Folder\Two") $age=(get-date).AddDays(-3) foreach ($logfolder in $logfolders) { Get-...
boossy's user avatar
  • 161
6 votes
Accepted

System.Security.AccessControl.PropagationFlags Powershell Equivalent GUI use?

The options in the advanced dialog are created by combining Propagation and Inheritance flags. GUI options This folder only Propagation: None Inheritance: None This folder, subfolders and files ...
Chris Dent's user avatar
6 votes
Accepted

How do I tune windows server 2012 R2 to handle NTFS file structure with 50 million files?

You currently have an MFT of 0x320900000 = 13,431,209,984 bytes = 12 GiB in size, with only 2GiB of that in memory. More RAM will allow you to have more of that in memory, if you want to cache more of ...
BeowulfNode42's user avatar
6 votes
Accepted

Cannot save Office files on shared network drive without delete permission

This happens because of how Office documents are opened for editing. When you open an Office document, the application creates a hidden temporary file in the same folder. As you work in the document,...
I say Reinstate Monica's user avatar
6 votes
Accepted

How to setup IIS on Failover Cluster with Shared Data

The NTFS/SMB permissions for shared IIS storage are detailed described in ms guide: https://docs.microsoft.com/en-us/iis/web-hosting/configuring-servers-in-the-windows-web-platform/configuring-share-...
batistuta09's user avatar
  • 9,126
6 votes
Accepted

Why is "traverse folder" and "execute file" a combined permission?

From filesystem standpoint, entering a directory is akin to executing, or activating, it. It clearly is a convention (directory are not really "executed"), probably rooted to the shortage of ...
shodanshok's user avatar
  • 50.7k
6 votes
Accepted

How NTFS folder access is checked in a Active Directory domain?

During logon/authentication/authorization check, the security group memberships are added to the Privilege Access Certificate (PAC) part of the Kerberos token. This includes nested groups. When a ...
Greg Askew's user avatar
  • 36.8k
6 votes

How NTFS folder access is checked in a Active Directory domain?

Let's start from the link you provided (emphasis mine) : The system compares the trustee in each ACE to the trustees identified in the thread's access token. An access token contains security ...
Swisstone's user avatar
  • 6,890
5 votes

How can I compact the VHD file with Ubuntu?

I can confirm: zerofree is working to compact virtual disk files BUT: you don't need to use any rescue CDs or to mount the VHDX in another virtual machine: sudo apt-get install zerofree Boot into ...
Jochen's user avatar
  • 169
5 votes
Accepted

Why do I sometimes get numbers back from the FileSystemRights access field when checking the ACL Access?

The FileSystemRights attribute is an enumeration. However the generic rights will not be enumerated. See output of: [System.Enum]::GetValues([System.Security.AccessControl.FileSystemRights]) The ...
jscott's user avatar
  • 24.8k
5 votes
Accepted

Windows / NTFS - is it possible to measure completion time of file operations?

Hire somebody to write either monolithic or mini filter driver for file system. You'll be able to intercept all calls from particular app of interest and track them right to NTFS or any other FS ...
BaronSamedi1958's user avatar
5 votes
Accepted

File system, that handles over 2 million files

XFS can take that, but it'll take it better if you plan for your usecase. Accessing that data (STAT and OPEN operations) will go faster if the OS has fewer inodes to romp through to get the data. If ...
sysadmin1138's user avatar
  • 134k
5 votes

Why does Windows process all NTFS child objects when changing a parent’s ACL?

By default, child folders inherit permissions from the parent folder. Assuming the default scope when you're adding/modifying permissions on the parent folder (this folder, subfolders and files) then ...
joeqwerty's user avatar
  • 111k
5 votes

File Share in Windows Domain

A general rule of thumb is if the folder is for a specific user, i.e. a Home drive folder or a specific confidential scanned document share, then set the permissions for the individual user. If the ...
Tim Liston's user avatar
5 votes

File Share in Windows Domain

From the Linux perspective and sharing via Samba I set the top level share to be 770 with the setgid bit set (so all files/directories created retain the group owners ship of the top level of the ...
ivanivan's user avatar
  • 1,498
5 votes

Is SMB safer than iSCSI for connection to a NAS?

Yes, any file-level network data access protocol is SAFER compared to the block (iSCSI, FC, FCoE etc) one due to inability to damage the volume with "network redirector", which is super-easy ...
BaronSamedi1958's user avatar
4 votes

How do I force ntfsresize to ignore the backup bootsector?

In reply to Luciano (StackExchange wouldn't allow me to comment, so I must put this in an own anser) - I had the same problem today and will write here the exact steps for testdisk... Choose disk (/...
Dweia's user avatar
  • 51

Only top scored, non community-wiki answers of a minimum length are eligible