No security tab

[AndyE45]

We've had rare occasions where the security tab on a file is missing and we have no rights to it all. It has nothing to do with the "simple file sharing" setting in XP, we're doing this on the server. The file in this case is desktop.ini in a user's profile directory, we can see the tab on every other file and directory in the folder. I'm logged on as a domain admin and the server is a domain member.

Anybody ever seen this? Any idea how to fix it?

 

[itsp1965]

Although you are a logged on as a domain admin, are you part of the administrators on this particular machine? Also check to see if the file's ownership has changed, as an administrator you can give it back to the local administrators group

 

[AndyE45]

itsp1965,

Thanks for the input.

I'd confirmed that the domain admins group is part of the local admins group and I'd tried it logged on as the local admin too just for to be thorough. Admin rights/credentials on the server is not the issue.

If you don't have a security tab you can't change the ownership. I've also tried taking ownership using cacls but that didn't work either.

 

[ForumKB]

Have you looked logged on as the user in question rather than an admin. This may be because the user profiles you are looking at are set up to be private even from the domain admins. There is an option for this somewhere but I can't remeber where off the top of my head.


Adrian Paris

Paris Engineering Ltd

http://www.ForumKB.com

Google search of just tech forums & articles
(very useful, honest!)

 

[AndyE45]

ForumKB,

There is no reason why this profile should be any different from any other. We have hundreds of users set up exactly the same way. We haven't tried logging in as the user yet but we may have to try that next.

Even if there's a setting to make this profile "private" as you say I would still question why every other file and directory I've checked in the profile folder doesn't have this problem.

Thanks.

 

[PScottC]

Sorry for asking the obvious, but is the partition in question formatted NTFS?


PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[AndyE45]

Yes, it's NTFS.

 

[PScottC]

Do xCACLs or iCACLs show that any permissions are applied to the file? Or do these programs error out when accessing the file?

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[AndyE45]

I just get the good old "Access is denied".

 

[PScottC]

Are you able to take ownership of the folder or does it break when you hit that file?

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[AndyE45]

No, I can't take ownership. Can't do it without a security tab and cacls didnt' work. A bit of a head scratcher so far.

 

[ForumKB]

I think PScottC means taking ownership of the parent folder with inheritance rather than the file itself, probably throw up an error but can't hurt to try.

BTW just out of interest as very probably irrelevent I remebered where you make the profile 'private'. It's in the GPO for the redirected profile folders, there is an option to give the user exclusive access to their my docs (makes them the owner and only person with any permissions).

Only mention it in case there has been some work done in this area that could be causing problems, not sure what happens if you change the settings for this policy after the profiles are created, e.g. whether it has no effect on existing profiless or only effects new files and folders etc. (probably not though but just a thought).


Adrian Paris

Paris Engineering Ltd

http://www.ForumKB.com

Google search of just tech forums & articles
(very useful, honest!)

 

[AndyE45]

Right, I must have read too fast. But as it turns out it's all moot now. I just checked and it's back to normal now, the tab is back with the correct permissions. I asked around and apparently nobody did anything at all.

Chalk it up to another MS quirk I guess.

Thanks to you both for all your input.