search for: inherit_only_ac

...9; LA = Local administrator Second ACE: A = allow 0x001200a9 = (Read and Execute) - (Inherited) S-1-22-2-0 = ??? a local Unix group Third ACE: A = allow 0x001200a9 = (Read and Execute) - (Inherited) WD = Everyone Fourth ACE: A = allow OICIIO = OI CI IO = OBJECT_INHERIT_ACE CONTAINER_INHERIT_ACE INHERIT_ONLY_ACE 0x001f01ff = Full control, can also be written as 'FA' CO = Creator owner Fifth ACE: A = allow OICIIO = OI CI IO = OBJECT_INHERIT_ACE CONTAINER_INHERIT_ACE INHERIT_ONLY_ACE 0x001200a9 = (Read and Execute) - (Inherited) CG = Creator group Sixth ACE: A = allow OICIIO = OI CI IO = OBJECT_I...

...1f03ff;;;SY)(A;OICIIO;WOWDGRGWGX;;;BA)(A;;0x001e01bf;;;BA)(A;OICIIO;GRGX;;;SO)(A;;0x001200a9;;;SO) > > Now, provided you have the key, you can easily decipher it, for > instance, (A;OICIIO;WOWDGRGWGX;;;CO) is: > > (ACCESS_ALLOWED_ACE_TYPE;OBJECT_INHERIT_ACE CONTAINER_INHERIT_ACE > INHERIT_ONLY_ACE;WRITE_OWNER WRITE_DAC GENERIC_READ GENERIC_WRITE > GENERIC_EXECUTE;;;SECURITY_CREATOR_OWNER_RID) > > See here: > https://docs.microsoft.com/en-us/windows/win32/secauthz/ace-strings > > and here: > > https://docs.microsoft.com/en-us/windows/win32/secauthz/sid-strings?redirec...

...xample: I apply a read, write and modify permission, but the user can only create directories and rename files if I assign permission to exclude files in folders, subfolders and files. This is normal? >Sixth ACE: >A = allow >OICIIO = OI CI IO = OBJECT_INHERIT_ACE CONTAINER_INHERIT_ACE >INHERIT_ONLY_ACE >0x001200a9 = (Read and Execute) - (Inherited) >WD = Everyone >Oh and it is wrong ;-) How could I fix this problem? Regards, M?rcio Bacci Em s?b., 13 de jun. de 2020 ?s 06:01, Rowland penny via samba < samba at lists.samba.org> escreveu: > On 12/06/2020 20:32, Marcio Demet...

I''ve got a (broken) version of File.set_permissions in CVS, and I need some help finishing it off please. Heesob, can you take a look? Thanks, Dan

...(A;OICIIO;GA;;;SY)(A;;0x001f03ff;;;SY)(A;OICIIO;WOWDGRGWGX;;;BA)(A;;0x001e01bf;;;BA)(A;OICIIO;GRGX;;;SO)(A;;0x001200a9;;;SO) Now, provided you have the key, you can easily decipher it, for instance, (A;OICIIO;WOWDGRGWGX;;;CO) is: (ACCESS_ALLOWED_ACE_TYPE;OBJECT_INHERIT_ACE CONTAINER_INHERIT_ACE INHERIT_ONLY_ACE;WRITE_OWNER WRITE_DAC GENERIC_READ GENERIC_WRITE GENERIC_EXECUTE;;;SECURITY_CREATOR_OWNER_RID) See here: https://docs.microsoft.com/en-us/windows/win32/secauthz/ace-strings and here: https://docs.microsoft.com/en-us/windows/win32/secauthz/sid-strings?redirectedfrom=MSDN Rowland

Hi Rowland >Hi Marcio, we would need more info, where are you migrating the home folders from ? and where to ? I copied Windows Server 2008 folders and permissions with ROBOCOPY to my Samba 4 server. >I know you mentioned a Win 2008 server, are the home folders stored on that ? The personal folders were stored on it (Windows), but now they are on my new Samba 4 file server. >Another

...phore objects. server: Make create_mutex use struct object_attributes and set the security descriptor of mutex objects. server: Make create_mapping use struct object_attributes and set the security descriptor of file mapping objects. advapi32: Add a test for access checks with the INHERIT_ONLY_ACE flag. advapi32: Fix the ACCESS_SYSTEM_SECURITY test by impersonating the token during the call to RtlAdjustPrivileges. server: Ignore ACEs with the INHERIT_ONLY_ACE flag set during access checks. credui: Add a banner and message box to the dialog presented by CredUIPromptForCrede...