Windows 2000 permissions issue.

[CFeyrer]

The D: drive on one of our servers is shared to Administrators, system and domain users, but for whatever reason nightly it clears out domain users. Do you know what local or domain policies might be in effect that might be changing these permissions nightly, or another way I can check this out?

Thanks.

CJF

 

[aftertaf]

You mean by this that the domain users group is being removed from the NTFS permissions tab on D, or from the share?

this shouldn't be happening automatically... it could be someone playing around here. you could try auditing to see who is exploiting the privilege..

enable auditing:
-on D, and audit success and failure of the 'changing permission' right.
-in local policy, enable auditing of 'privilege use'.

this could be what is happening, or at least it might capture which process is changing the permissions in case it is not a physical person responsible.




Aftertaf

"Resolve is never stronger than the night before it was never weaker