Permission Problems

[minglespasm]

Hi,

We've just found something odd happening to permissions on one of our windows 2003 servers.

Has anybody ever experienced users other than those defined in the secuurity settings being able to gain access to supposedly resticted folders?

Removing them from the share prohibits access to the mapped drive.

Giving them read access to the share (and no other permissions on any folders within that share) allows them to view ANYTHING within the share. (bearing in mind they [the user] are not part of any groups which have access to the share).

Permission inheritance has also been turned off on all folders within the share.

Any pointers would be much appreciated - otherwise I may have a whole corporate tonne of bricks puring on my head next week.

Cheers

 

[NickFerrar]

Sounds odd, given that they are Windows 2003 servers have you checked the 'Effective Permissions' tab in advanced security on the folder for the users getting read access?

 

[minglespasm]

We've solved the problem,

after auditing all the security settings, we found that for some reason (quite scary really) - the domain users group was included in the local user group on the server.
Thus granting all and sundry access.... if they had the right knowledge.

time to get round to setting up some kind of monitoring of the permissions on the servers I think....

 

[bofhrevenge2]

Thats because by default the domain users group is a member of the local users group.

 

[ivs7720]

Is this true on DC as well?