By default, an object inherits permissions from its parent object, either at the time of creation or when it is copied or moved to its parent folder. The only exception to this rule occurs when you move an object to a different folder on the same volume. In this case, the original permissions are retained.
Additionally, note the following rules:
• | The Everyone group is granted Allow Full Control permissions to the root of each NTFS drive. |
• | Deny permissions always take precedence over Allow permissions. |
• | Explicit permissions take precedence over inherited permissions. |
• | If NTFS permissions conflict -- for example, if group and user permissions are contradictory -- the most liberal permissions take precedence. |
• | Permissions are cumulative. |
• | To preserve permissions when files and folders are copied or moved, use the Xcopy.exe utility with the /O or the /X switch. The object’s original permissions will be added to inheritable permissions in the new location. |
• | To add an object's original permissions to inheritable permissions when you copy or move an object, use the Xcopy.exe utility with the –O and –X switches. |
• | To preserve existing permissions without adding inheritable permissions from the parent folder, use the Robocopy.exe utility, which is available in the Windows 2000 Resource Kit. For additional information about the Windows 2000 Resource Kit, visit the following Microsoft Web site: |
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 (http://support.microsoft.com/kb/322756/) How to back up and restore the registry in Windows
1. | Click Start, click Run, type regedit in the Open box, and then press ENTER. |
2. | Locate and then click the following registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer |
3. | On the Edit menu, click Add Value, and then add the following registry value: Value name: ForceCopyAclwithFile Data type: DWORD Value data: 1 |
4. | Exit Registry Editor. |
1. | Click Start, click Run, type regedit, and then press ENTER. |
2. | Locate and then click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer |
3. | On the Edit menu, click Add Value, and then add the following registry value: Value name: MoveSecurityAttributes Data type: DWORD Value data: 0 |
4. | Exit Registry Editor. |
No comments:
Post a Comment