All Questions
Tagged with windows permissions
360
questions
0
votes
0
answers
40
views
Access is denied, with Gstreamer audio capture on Windows Server 2022
Note: I'm posting to ServerFault with this as I believe there's some sort of permissions or isolation or perhaps missing system component needed specifically for Windows Server. This is not a general ...
- 1,425
0
votes
1
answer
63
views
Windows shared folder accessible only by Administrators
Windows Server 2012 R2.
A shared folder was created and the permissions set to full control.
The share is only accessible by Administrators.
Why?
- 11
0
votes
0
answers
316
views
pg_ctl start on Windows gives error: could not open file "global/pg_control": Permission denied
On Windows Server 2022, I am logged in as Administrator and trying to do a pg_ctl start on a Postgresql database that was initially created by user SYSTEM, but get the following error in the cmd ...
- 1
0
votes
1
answer
32
views
Protecting the service of a specific application
We have a business requirement where we don't want even Admins to be able to stop a service of a specific application running on windows machines. Reason being the application plays an important role ...
0
votes
0
answers
33
views
0x80004005 when performing administrative tasks
We have an AD network, and a group of users has higher privileges than the standard, configured via GPO in Computer Configuration > Policies > Windows Settings > Security Settings > ...
- 302
0
votes
0
answers
96
views
Auditing Domain Administrators - Best practice / Advice needed please
Please do advise if I am posting in the wrong place, I have not found this the easiest site to navigate (or maybe it is me...).
I have been tasked with auditing and fixing our privileged accounts ...
4
votes
1
answer
942
views
How to make get_current_user() return the same user as $_SERVER['AUTH_USER']?
I have a PHP app that uses LDAP for logging in. The app is served on Windows Server with IIS.
In the past, I was using $_SERVER['AUTH_USER'] to get the remote Windows user that was using the app:
$...
- 229
-1
votes
1
answer
28
views
How to create a non-modifiable structure of shared folders on NTFS?
I am in the process of finding a suitable solution of the following.
I have a Windows Server 2013 share with a set of shared folders. This share has a central folder (say Shares) and a set of ...
- 1
0
votes
1
answer
400
views
How to set limited permissions using command line on windows?
user want to delete all permissions and keep only modify permission for everyone and full permission to system.
Like this.
But present with icacls command
icacls "%ProgramData%\myfolder\...
- 155
3
votes
2
answers
151
views
How to properly secure user's folders?
On a file server, a base folder contain user's folders:
This base folder is protected against user's actions (deletion, rename, dump of files, etc), users can only read and traverse it:
To ...
- 1,701
1
vote
0
answers
1k
views
Mounting a Linux NFS share with the Windows 10 client seems to ignore groups (despite --manage-gids)
I have an NFS share exported from a Centos 7.9 VM and mounted on a Windows 10 PC. The share is accessible from Windows, but directories who's permissions are set not readable by the user but readable ...
- 111
-1
votes
2
answers
1k
views
Unable to find user account to set permissions for private key
I'm trying to set up a security certificate for a sql server. According to the documentation, I need to set up the permissions so that the sql server instance can read the private key. I tried setting ...
- 161
0
votes
1
answer
365
views
Active Directory integration with Linux File System using Python
We have an Active Directory setup. We have a bunch of Linux servers where we create a folders/directory where we need to give only Users in specific AD groups permissions.
How do we create directories ...
- 695
-5
votes
1
answer
208
views
NTFS file owner is able to delete a file with read permission [closed]
I have a file on NTFS partition, and I'm the owner of this file .
I have the read permission only on this file and no other permissions are set.
I tried to delete the file thinking it will show "...
- 123
1
vote
2
answers
4k
views
SSH connection issue : How to change folder / file permissions in Windows similarly to Linux?
I have hard times connecting my local PC through SSH to another remote PC. I set the public key on both machines in the authorized_keys folder following this tutorial : https://help.ubuntu.com/...
0
votes
1
answer
5k
views
FTP gives an error 550 but file permissions are the same
Setup:
Windows Server 2008 R2 with updates.
Filezilla FTP Server 0.9.60 (for LAN use only)
Clients:
Total Commander 10
WinSCP 5.17
I have two files in the same folder. I can overwrite one of them ...
- 11
1
vote
1
answer
62
views
Account permissions needed to change file ownership
I have an application that needs to be able to change the owner of certain files. The application runs under a domain service account (with local admin rights to the application server, but not the ...
- 11
1
vote
1
answer
89
views
windows server 2008 folder share permissions on new OS
I have a AD DC 2008
i installed AD DC on another 2012 host, transferred the 2008 domain PDC and all other FSMO roles to the 2012 server.
the 2008 server has a E: drive with shared folders accessed ...
1
vote
1
answer
815
views
GPO cannot copy MSI from NETLOGON share - but when the file is renamed it can be copied
I have a Computer GPO in a Windows Active Directory based network (with on-premises Domain Controllers) that currently installs an application from \\MYDOMAIN\NETLOGON\...\application.msi at startup. ...
- 1,681
1
vote
1
answer
922
views
Application that requires admin rights
We have AD and Windows 10, we have some applications that for unknown reasons requires admin rights. Is there any other option that giving local admin to user? Good practices? I cannot change software....
- 23
0
votes
1
answer
380
views
How to deny git pull and cd into a folder/file in Windows?
So I find myself being forced to use a Windows machine just because thats what the financial institution feels is more secure for an outside contractor.
I am using powershell and I just received some ...
- 229
1
vote
0
answers
100
views
WINDOWS Server 2016 RDS Rights migration
We installed the RDS role on a windows server 2016 using an admin account on the server.
when we connect via another account (also admin), we cannot see the same view on the RDS (with the message in ...
0
votes
1
answer
2k
views
Explanation :File permissions override folder permissions, unless the Full Control permission has been granted to the folder
According to the article:
http://ntfs.com/ntfs-permissions-precedence.htm
The hierarchy of precedence for the permissions can be summarized as
follows, with the higher precedence permissions listed ...
- 103
0
votes
1
answer
39
views
I can write into SambaShare folder but I can not open any file or folder
Samba server is running in centos7, the folder is mounted in windows 10.
I can see all the files and folders, but I can not open any of them, I can not even copy from my sambashare folder to the ...
- 3
1
vote
0
answers
1k
views
Login to Windows 10 through OpenSSH Server As Regular User gives Administrator Privileges
I have installed OpenSSH server on a Windows 10 system and added my public key to the file at C:\Users\foo\.ssh\authorized_keys.
However, when I log in to the Windows account using SSH and created a ...
- 213
1
vote
0
answers
79
views
Windows Linux shared file system ownership
We have a network file system shared among Linux and Windows servers.
Whatever Windows writes gives ownership to root when observed from Linux.
In Linux we have a tomcat user which thus, is not able ...
- 119
1
vote
1
answer
3k
views
AD Group added to Local Admins not working on domain-joined PC - adding a user directly to local admins does?
I'm pulling my hair out on this, and I don't understand what I'm missing.
I have an admin Name Bob. I have added Bob to a global security group named "LocalAdmins".
We go to PC (Harry's) ...
- 11
1
vote
0
answers
39
views
Prevent users to drop image files in a shared folder
I have a folder that is shared on the network. That folder contains a lot of files, documents, images, etc.
I would like that users can put any kind of files in the folder but NO images (JPG).
I can't ...
- 53
3
votes
4
answers
9k
views
Active Directory roaming profile permission issue on folder C:\Users\<user>\AppData\Roaming\Microsoft\Installer
I have a problem with one specific folder while user profiles are synced at logon. Let me explain the situation:
I have:
A user account (MYDOMAIN\accountname)
Security group 'Access to WADUP_RW'
A ...
- 91
0
votes
1
answer
714
views
Get permission error when restarting Virtual Machine in Azure
Our network engineer left the company for another opportunity and I inherited the role of Network Engineer. I was trying to RDP to one of our Virtual Machine, but could never connect. I want to reboot ...
0
votes
0
answers
4k
views
Windows 10 asking for credentials for SMB Share when accessed via IP, but not when accessed via DNS hostname
Summary
I have an SMB share on a domain-joined Synology DS416 NAS. A single computer on our network as a strange issue where the user groupuser can access the share via hostname \\group_nas\share ...
- 303
0
votes
0
answers
604
views
How can I run a scheduled task on domain controller whenever a domain user logs into the domain?
I need to log domain user logins & logouts to an Oracle database. Not all computers have Oracle drivers, but one of the domain controllers does.
So I have created a script which writes the ...
- 151
3
votes
1
answer
15k
views
Check 'effective permissions', 'effective access' from command-line, Windows/NTFS
How do I mimic Advanced Security Settings 'Effective Access' tab in command line (Win10 notably)? Prefer built-in tools, I'm about to evaluate if sysinternals AccessChk can accomplish this
icacls ...
- 639
0
votes
1
answer
423
views
How to change Windows Installer service permissions
I'm about to run CI service as a custom user account.
The issue I faced is that Windows Installer service is allowed to run only by Administrators, INTERACTIVE/SERVICE accounts, or TrustedInstaller: ...
0
votes
2
answers
462
views
Any user can see (but not change anything in AD) with RSAT?
I'm setting up a helpdesk person with RSAT and then delegation for password resetting and when installing RSAT I noticed that ANY domain user can install RSAT and see every OU, which users are ...
- 101
2
votes
2
answers
711
views
Deny access to "bat" files in Apache
I want to deny direct access to some sensitive files in my root application (e.g: log,sh, ini ...etc).
and for this reasons I have used the following directive in my main .htaccess:
<FilesMatch "\...
- 21
1
vote
1
answer
1k
views
Where do these NTFS permissions actually live? How are they created?
Alrighty, not sure how to word this but:
Where do the NTFS permissions themselves get created? For example, I can set "Full Control" or "Read", but where are those programmed at?
Here is why I ask:
...
- 113
3
votes
1
answer
9k
views
RDP Not Working For New Users (The connection was denied because the user is not authorized for remote login)
New users are not allowed to RDP even though they have the same permissions as existing users. The only work around is to go to System Properties > Remote > Remote Desktop> Select Users and add the ...
- 31
12
votes
2
answers
4k
views
What's the name of this windows feature?
I'm trying to find the name and documentation of an old windows feature I believe it was present in Windows Vista.
All I can remember is this. When you or an application tries to write to a file that ...
- 243
1
vote
3
answers
3k
views
Windows permission - Deny sub-folder creation but allow files editing
I'm currently trying to setup a folder on a file server (Windows Server 2012 r2) where some users can create and edit files, but not create sub-folders. I assumed it would be easy with advanced ...
- 13
0
votes
1
answer
1k
views
Group rights to manage Group Policy?
Consider the following scenario:
The Client Engineering department is responsible for the administration of all systems that users interactively log into, including most corporate desktop and laptop ...
- 1,922
0
votes
1
answer
372
views
SeBackupPrivilege, but cannot read all files
I am trying to read full directories independent of the current file-permissions. But even though I do have "SeBackupPrivilege", the following code leads to an "UnauthorizedAccessException". How can ...
- 393
2
votes
1
answer
7k
views
Grant "Network Service" Read Only Permissions to Cert for RDP via Batch
I'm securing RDP by adding my SSL cert to my Windows host and of course, I'm working on scripting everything. I've got it 99% complete, the only step I can't figure out how to script is relating to ...
1
vote
1
answer
1k
views
Windows - Set permission on folder only without recursing subobjects (slow for large directory trees)
There are many times when I wish to set a permission on a folder only, but all the programs i've tried will recurse through all sub files and folders during the process. As this is slow, is there any ...
- 163
0
votes
2
answers
107
views
Application needs access to files, but user is not allowed to access them
I have a requirement that my Windows GUI application writes log files. But for auditing purposes, certain users that run the application are not allowed access those files. Is there any way to handle ...
- 101
4
votes
1
answer
83
views
SMB does not present permissions on looped up raw disk image / backup of a Windows NTFS volume
I have a raw copy of a Windows NTFS volume on my Linux machine. When I loop it and share it out on a domain-joined Linux machine via Samba as-follows --
[global]
workgroup = ...
- 141
1
vote
0
answers
23
views
How to start a process with a subset of user permissions?
Let's assume I have a process a.exe that according to its manual/specification does not write any files, how would I start it without write permission?
Closest I can think of is creating a user with ...
- 113
0
votes
2
answers
3k
views
How can I delete an inaccessible folder on Windows 10?
I have a folder on one of my hard drives, P:\csharp\aperture\keystone\src\Keystone, which I want to delete but cannot. I have tried numerous different ways to change/reset permissions and I still ...
- 101
0
votes
0
answers
94
views
How does one grant an application exclusive access to the Windows registry?
My company uses a line-of-business application with a peculiar requirement. This software's purpose is to manage data collected by a personnel electrostatic discharge test machine (i.e., poll the ...
2
votes
0
answers
1k
views
Export/Import Registry ACLs
Is it possible to export/import Windows registry ACLs? How might one go about doing so?
A normal registry export does not include the ACLs.
(I'm referring to the permissions that can be set on ...
- 53