RE: Simple File Permissions Question

[Jim Dandy]

Thanks to Damien and Ben for the tips.  Ben, you are correct, it's a startup 
scrip.

Curt

-Original Message-
From: Ben Scott [mailto:mailvor...@gmail.com] 
Sent: Tuesday, March 27, 2012 11:57 AM
To: NT System Admin Issues
Subject: Re: Simple File Permissions Question

On Tue, Mar 27, 2012 at 2:10 PM, Jim Dandy  wrote:
> I have a logon script that creates a file in a shared folder.  The 
> owner of that file is the computer that made it.

  That's odd.  Are you sure it's not a computer startup script?  Logon scripts 
should run in the context of the user being logged on.

> The way it's set up now, if another computer tries to overwrite that 
> file, it can't.  ... What permissions should I give the folder so that 
> other computers can overwrite files created in that directory?

  IIRC, a subject (security principal) needs Change (Modify) permission to 
truncate or write within a file.  To delete a file, one needs Delete on the 
file, or "delete children" (not actually called
that) on the containing folder.

> There is the Users group.  Is there a similar group that defines just 
> computers?

  Yes.  "Domain Computers".

> Does the Users group include computers?

 No.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ 
<http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

Re: Simple File Permissions Question

[Ben Scott]

On Tue, Mar 27, 2012 at 2:10 PM, Jim Dandy  wrote:
> I have a logon script that creates a file in a shared folder.  The owner of
> that file is the computer that made it.

  That's odd.  Are you sure it's not a computer startup script?  Logon
scripts should run in the context of the user being logged on.

> The way it’s set up now, if another computer tries to overwrite that file, it
> can’t.  ... What permissions should I give the folder so that other
> computers can overwrite files created in that directory?

  IIRC, a subject (security principal) needs Change (Modify)
permission to truncate or write within a file.  To delete a file, one
needs Delete on the file, or "delete children" (not actually called
that) on the containing folder.

> There is the Users group.  Is there a similar group that defines just
> computers?

  Yes.  "Domain Computers".

> Does the Users group include computers?

 No.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin

RE: Simple File Permissions Question

[Damien Solodow]

Is this a domain?
If so, the Domain Computers group is the one you want. Granting it Modify will 
do the trick, but you can be more granular if desired.

DAMIEN SOLODOW
Systems Engineer
317.447.6033 (office)
317.447.6014 (fax)
HARRISON COLLEGE

From: Jim Dandy [mailto:jda...@asmail.ucdavis.edu]
Sent: Tuesday, March 27, 2012 2:11 PM
To: NT System Admin Issues
Subject: Simple File Permissions Question

I have a logon script that creates a file in a shared folder.  The owner of 
that file is the computer that made it.  The way it's set up now, if another 
computer tries to overwrite that file, it can't.  I have to go in and manually 
delete the file to allow another computer to recreate it.  What permissions 
should I give the folder so that other computers can overwrite files created in 
that directory?  There is the Users group.  Is there a similar group that 
defines just computers?  Does the Users group include computers?

Thanks for your help.

Curt Finley

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com>
with the body: unsubscribe ntsysadmin

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe ntsysadmin