Strange access problems after converting to NTFS

[deik313]

Hi All...
I posted a while ago about not having any security on my clients, and finally converted them all to NTFS, now I have too much! Everything is wonderful, except for a strange problem that I'm having with a non-Microsoft application. I installed the program using the Administrator account originally, but now when a user logs into the computer (domain), the icons appear on the desktop like missing icons (white with dots) and say "invalid shortcut" in the properties. The programs don't appear in the program list, even though I've given the users full rights on those folders. I actually gave one user full access to the entire hard drive, just to see if it was a security issue somewhere else, but he was still unable to see the program installed. Does anyone have any ideas on this? What would cause a domain user with full rights to the hard drive to not be able to see a program that is installed?
Thank you for ANY help on this...
dei

 

[Mellors]

Hello.
Tip 1: See if the user can run the program by browsing to the exe file itself

2. Check the path in the shortcut. I used to have a problem when I moved from one machine to another that my shortcuts whould be pointing at another machines drive!

Hope this may help.

 

[deik313]

The user, with Admin rights, cannot even see the program or it's folder when browsing in Explore. Even if I log in as Administrator, this account cannot see the program folder.
The only account that can see it is the one that installed it, even if everyone else is given full rights to it.

 

[whythis]

Try setting up a separate share just for the program, even to the point of mapping a network drive to it. Then assign rights to the new network share. Hope this helps. I am not too well versed in network sharing on 2K Server. whythisagainwhythisagainwhythisagain

 

[ashpp]

> converted them all to NTFS

That explains it - theres a bug in conversion that doesn't give security consistent with that of a fresh NTFS install.

Log on as administrator

and type into the run command - all on one line

Secedit /configure /db %SYSTEMROOT%\security\database\cvtfs.sdb /Cfg "%SYSTEMROOT%\security\templates\setup security.inf" /areas filestore

WARNING! Doing this could screw the system up completely. So be warned!

If you aren't happy doing the above you could first try giving SYSTEM & Administrator full control access to the C: and users read & exe, lfc, & read.

Ash.

 

[deik313]

Ughhh! This is frustrating! I actually took one machine and completely reformatted with NTFS and reinstalled Windows XP/Pro! Now, the program that I'm having trouble with will not even run! I installed it as usual, and even the administrator cannot see it. As far as I know, the admin account has full access to the entire hard drive, and that account cannot even see the program installed! Yikes!

By the way, I am installing on a client, not on the file server (Win 2000). We run our programs locally, but now I'm wondering if I shouldn't try to install it on the server, as mentioned above??? Hmmmm....I'll try that...
dei