 |
|
 |
|
Next: Permission for Shares
|
| Author |
Message |
External

Since: Oct 10, 2003 Posts: 3
|
(Msg. 1) Posted: Fri Oct 10, 2003 2:52 pm
Post subject: Lost permissions Archived from groups: microsoft>public>windows>server>security (more info?)
|
|
|
Here's an interesting one. We use a batch file called cegetter to download
virus definitions from Symantec. Occassionally, the navup8.exe file (which
updates the defs) does not get deleted by the batch file, and this prevents
the definitions from updating every following day. When we go to delete it,
we get access denied, even though the task runs under the admin account and
we are attempting to delete under the same account. Take ownership doesn't
work, nor does SubinACL (the latter returns Error 5). Rebooting restores
permissions, but we don't like rebooting our PDC a few times a month to
restore permissions on a file that should delete automatically. Symantec
doesn't have any ideas. Does anyone else? >> Stay informed about: Lost permissions |
|
| Back to top |
|
 |  |
External

Since: Jan 30, 2004 Posts: 40
|
(Msg. 2) Posted: Sat Oct 11, 2003 8:54 pm
Post subject: Re: Lost permissions [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
Make sure that some process isn't actually using the file, and thus has some
kind of lock on it.
Additionally, it would help if you posted the actual NTFS permissions that
the file has.
Cheers
Ken
"vsr" <vribas RemoveThis @merrimackcounty.net> wrote in message
news:umTQz%231jDHA.1096@TK2MSFTNGP11.phx.gbl...
: Here's an interesting one. We use a batch file called cegetter to download
: virus definitions from Symantec. Occassionally, the navup8.exe file (which
: updates the defs) does not get deleted by the batch file, and this
prevents
: the definitions from updating every following day. When we go to delete
it,
: we get access denied, even though the task runs under the admin account
and
: we are attempting to delete under the same account. Take ownership doesn't
: work, nor does SubinACL (the latter returns Error 5). Rebooting restores
: permissions, but we don't like rebooting our PDC a few times a month to
: restore permissions on a file that should delete automatically. Symantec
: doesn't have any ideas. Does anyone else?
:
: >> Stay informed about: Lost permissions |
|
| Back to top |
|
 |  |
External

Since: Oct 10, 2003 Posts: 3
|
(Msg. 3) Posted: Tue Oct 14, 2003 9:29 am
Post subject: Re: Lost permissions [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
Ken-
I'd love to post the permissions, but the file won't let us access that
information. The file is placed on the root of the partition, which has the
following permissions:
Creator Owner Full Control
Domain Admins Full Control
Domain Users Read (RX)
Server Operators Change (RWXD)
System Full Control
As I said, the task runs under the admin account, which is obviously a
member of Domain Admins. If the file locked every time, it would make more
sense, but it only happens about once every other week. Next time it happens
I'll check to see if stopping any of the Symantec services allows us to
access the file (thanks for the suggestion). I'm skeptical, though; any
further thoughts would be appreciated.
Vince Ribas
"Ken Schaefer" <kenREMOVE.TakeThisOut@THISadOpenStatic.com> wrote in message
news:OHx%23BY%23jDHA.964@TK2MSFTNGP10.phx.gbl...
> Make sure that some process isn't actually using the file, and thus has
some
> kind of lock on it.
>
> Additionally, it would help if you posted the actual NTFS permissions that
> the file has.
>
> Cheers
> Ken
>
>
> "vsr" <vribas.TakeThisOut@merrimackcounty.net> wrote in message
> news:umTQz%231jDHA.1096@TK2MSFTNGP11.phx.gbl...
> : Here's an interesting one. We use a batch file called cegetter to
download
> : virus definitions from Symantec. Occassionally, the navup8.exe file
(which
> : updates the defs) does not get deleted by the batch file, and this
> prevents
> : the definitions from updating every following day. When we go to delete
> it,
> : we get access denied, even though the task runs under the admin account
> and
> : we are attempting to delete under the same account. Take ownership
doesn't
> : work, nor does SubinACL (the latter returns Error 5). Rebooting restores
> : permissions, but we don't like rebooting our PDC a few times a month to
> : restore permissions on a file that should delete automatically. Symantec
> : doesn't have any ideas. Does anyone else?
> :
> :
>
> >> Stay informed about: Lost permissions |
|
| Back to top |
|
 |  |
External

Since: Jan 30, 2004 Posts: 40
|
(Msg. 4) Posted: Wed Oct 15, 2003 1:37 pm
Post subject: Re: Lost permissions [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
Have you tried to "take ownership"?
Cheers
Ken
"vsr" <vribas.DeleteThis@merrimackcounty.net> wrote in message
news:uUJqqclkDHA.2488@TK2MSFTNGP12.phx.gbl...
: Ken-
: I'd love to post the permissions, but the file won't let us access that
: information. The file is placed on the root of the partition, which has
the
: following permissions:
:
: Creator Owner Full Control
: Domain Admins Full Control
: Domain Users Read (RX)
: Server Operators Change (RWXD)
: System Full Control
:
: As I said, the task runs under the admin account, which is obviously a
: member of Domain Admins. If the file locked every time, it would make more
: sense, but it only happens about once every other week. Next time it
happens
: I'll check to see if stopping any of the Symantec services allows us to
: access the file (thanks for the suggestion). I'm skeptical, though; any
: further thoughts would be appreciated.
:
: Vince Ribas
:
: "Ken Schaefer" <kenREMOVE.DeleteThis@THISadOpenStatic.com> wrote in message
: news:OHx%23BY%23jDHA.964@TK2MSFTNGP10.phx.gbl...
: > Make sure that some process isn't actually using the file, and thus has
: some
: > kind of lock on it.
: >
: > Additionally, it would help if you posted the actual NTFS permissions
that
: > the file has.
: >
: > Cheers
: > Ken
: >
: >
: > "vsr" <vribas.DeleteThis@merrimackcounty.net> wrote in message
: > news:umTQz%231jDHA.1096@TK2MSFTNGP11.phx.gbl...
: > : Here's an interesting one. We use a batch file called cegetter to
: download
: > : virus definitions from Symantec. Occassionally, the navup8.exe file
: (which
: > : updates the defs) does not get deleted by the batch file, and this
: > prevents
: > : the definitions from updating every following day. When we go to
delete
: > it,
: > : we get access denied, even though the task runs under the admin
account
: > and
: > : we are attempting to delete under the same account. Take ownership
: doesn't
: > : work, nor does SubinACL (the latter returns Error 5). Rebooting restor
es
: > : permissions, but we don't like rebooting our PDC a few times a month
to
: > : restore permissions on a file that should delete automatically.
Symantec
: > : doesn't have any ideas. Does anyone else?
: > :
: > :
: >
: >
:
: >> Stay informed about: Lost permissions |
|
| Back to top |
|
 |  |
External

Since: Oct 10, 2003 Posts: 3
|
(Msg. 5) Posted: Wed Oct 15, 2003 1:37 pm
Post subject: Re: Lost permissions [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
|
|
|
Yes, Take ownership is also denied. It locked again today and I tried
stopping all Symantec related services and processes, but was still unable
to delete the file.
"Ken Schaefer" <kenREMOVE RemoveThis @THISadOpenStatic.com> wrote in message
news:%230u2v2skDHA.4008@TK2MSFTNGP11.phx.gbl...
> Have you tried to "take ownership"?
>
> Cheers
> Ken
>
> "vsr" <vribas RemoveThis @merrimackcounty.net> wrote in message
> news:uUJqqclkDHA.2488@TK2MSFTNGP12.phx.gbl...
> : Ken-
> : I'd love to post the permissions, but the file won't let us access that
> : information. The file is placed on the root of the partition, which has
> the
> : following permissions:
> :
> : Creator Owner Full Control
> : Domain Admins Full Control
> : Domain Users Read (RX)
> : Server Operators Change (RWXD)
> : System Full Control
> :
> : As I said, the task runs under the admin account, which is obviously a
> : member of Domain Admins. If the file locked every time, it would make
more
> : sense, but it only happens about once every other week. Next time it
> happens
> : I'll check to see if stopping any of the Symantec services allows us to
> : access the file (thanks for the suggestion). I'm skeptical, though; any
> : further thoughts would be appreciated.
> :
> : Vince Ribas
> :
> : "Ken Schaefer" <kenREMOVE RemoveThis @THISadOpenStatic.com> wrote in message
> : news:OHx%23BY%23jDHA.964@TK2MSFTNGP10.phx.gbl...
> : > Make sure that some process isn't actually using the file, and thus
has
> : some
> : > kind of lock on it.
> : >
> : > Additionally, it would help if you posted the actual NTFS permissions
> that
> : > the file has.
> : >
> : > Cheers
> : > Ken
> : >
> : >
> : > "vsr" <vribas RemoveThis @merrimackcounty.net> wrote in message
> : > news:umTQz%231jDHA.1096@TK2MSFTNGP11.phx.gbl...
> : > : Here's an interesting one. We use a batch file called cegetter to
> : download
> : > : virus definitions from Symantec. Occassionally, the navup8.exe file
> : (which
> : > : updates the defs) does not get deleted by the batch file, and this
> : > prevents
> : > : the definitions from updating every following day. When we go to
> delete
> : > it,
> : > : we get access denied, even though the task runs under the admin
> account
> : > and
> : > : we are attempting to delete under the same account. Take ownership
> : doesn't
> : > : work, nor does SubinACL (the latter returns Error 5). Rebooting
restor
> es
> : > : permissions, but we don't like rebooting our PDC a few times a month
> to
> : > : restore permissions on a file that should delete automatically.
> Symantec
> : > : doesn't have any ideas. Does anyone else?
> : > :
> : > :
> : >
> : >
> :
> :
>
> >> Stay informed about: Lost permissions |
|
| Back to top |
|
 |  |
| Related Topics: | How get "log on locally" users and groups programatically? - Hi, Spent nearly 8 hours googling and trying code on this yesterday without much success. I'd like to write a .NET application (using .NET primitives, older Win32 calls, or WMI etc) to work out which users can log onto a machine the application is..
Apache on W2k Server - Does anyone know of ANY legitimate reason why two unkillable instances of Apache would be running on an internal non-web server? Apache has not been installed by anyone legitimately. The only software installed is Veritas Backup Exec and a home-grown..
Certificate web requests question - We have a web site that does Kerberos proxy for our web sites. For user education reasons, I would like to use the proxy for user authentication when requesting certificates. The proxy page authenticates the user and returns a UID to the calling page,....
Smart Card Only authentication - Hi, I've got my Windows 2000 server successfully authenticating using smart cards and everything is working fine. What I would like to do is actually disable keyboard login on the workstation (even if the SmartCard reader isn't present if possible) - is...
Advices to choose a Windows 2003 Personal Firewall - Hi, I'm looking around to choose a good firewall for my server, here the config: Windows Server 2003 Enterprise LAN Cisco 820 Router DSL Active Directory DNS DHCP Actually i'm running Kerio Winroute 5.08 and i find it very nice.... |
|
You can post new topics in this forum You can reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|
|
|
 |
|
|