Folder Rights

[PIPIL]

Hello everyone I have a question for you all really wierd:
we have a folder for incoming faxes,we use a windows 2000 professional as the fax machine(has the client 32 installed), all faxes are storaged after being received to a folder on the network the G:\incoming faxes on ly two groups ara alowed to access this folder one group all rights and another group read only, it was working before but suddenly all the users on the network has full rights to this folder even that the trustees are those 2 group mentioned above. what do you think is happening? why everyone has right assigned full rights?

thanks for your help.

pipil

 

[terry712]

a container or public must have rights

put an irf on this directory then grant both these groups the explicit rights

 

[PIPIL]

thanks terry I will try that. thanks for your help.

pipil

 

[Jontmke]

yes terry has the right idea, something above this folder changed rights and the inheritance passed down. I would check out what did that. It might have opened up your sys volume to the users to be able to delete critical files.

Jon

There is much pleasure to be gained from useless knowledge. (Bertrand Russell)

 

[PIPIL]

thanks Jon I will check that too. good day.

 

[marvhuffaker]

I hate IRF's, they make things sloppy and are difficult to manage. Plus if you put an IRF in place without knowing where the other rights are assigned or coming from, you might disable access to people that need it.

Go to the root of the volume, find out who has rights there. Remove any unnecessary ones. Then work your way down the structure till you get to the folder in question.


Marvin Huffaker MCNE, CNE
Marvin Huffaker Consulting

http://www.redjuju.com

 

[ITsmyfault]

FWIW
I agree with Marvin. IRF's are messy and harder to trace so unless you are a documentation ace I'd really try and skip them. Just keep backing out up the tree to find out where the rights are flowing from and take them away.. Should take all of 5 min to back through the tree to where things went wrong.

Also, make sure Public has it's rights specifically taken away if you don't want everyone to be able to see and open these files. Folks miss that a lot. (Public gets Read and File Scan by default on the file system..)


"if it's not documented, it's broken by definition" - anon

 

[PIPIL]

thank you all for the great tips, IRF was not set right. I was able to fix it with your tips.

Thanks.