NTUser Folder and File Access Rules - System Admin Discussion Boards

Mekong River30-Mar-09 16:58

30-Mar-09 16:58

Hi, I have 2 question related to the RUNAS command in windows XP. When I hold down the shift key and right click on the short cut that I want to perform and administration task and click on the Run As... command, I found that in the second option the system already place the user name of built-in administrator account for me and I just fill the password for administrator account and click Ok button. I think this point could lead to a security risk because the attacker already know the user name of admin account and they just try to search for the password is enough. From here does any one know how to set any setting when the dialog box of runas command to empty the buil-in user name of admin and user need to type both user name and password?

The second question is the script that I need to use with the run command. My computer have a legacy application which could not run in the normal user account mode. Its need to run under the power user group. But I try to write the script in bat file to use the runas command with the user that has power user group. When I run it, it always ask for the password for the specific user account. So I need inform the user to fill in the password. I don't want to do this. I want to fill the password in the script file and when its run its will goes group the application.

Thank in advance!!!

Re: Runas command

Mekong River30-Mar-09 18:33

Mekong River

30-Mar-09 18:33

I got the answer from my second question from here.[^]

"Service Unavailable"

Member 607471530-Mar-09 1:33

Member 6074715

30-Mar-09 1:33

Hello,
I found the error "Service Unavailable" caused by "Application pool 'DefaultAppPool' is being automatically disabled due to a series of failures in the process(es) serving that application pool."

Thanks,

Problem In Network

sarfarazaliqureshi26-Mar-09 3:01

sarfarazaliqureshi

26-Mar-09 3:01

Dear Friends,

Please help me I have Two Problems....

1. Actually I am a client of a LAN of users 10,the problem is this that Server has applied restriction on my account so that I can use only 512kbps out of 1Mb(DSL).Is there any way so that I can Obtained full speed in presence of restriction?

2. Second problem is this that I want to hide my self from appearing in the Server Report(Windows 2003 Server) which shows that How Much I have downloaded the Data From Internet(Amount of Internet I used)?

Please help me if any body can

Thanks

Re: Problem In Network

Dave Kreskowiak26-Mar-09 3:31

Dave Kreskowiak

26-Mar-09 3:31

sarfarazaliqureshi wrote:
1. Actually I am a client of a LAN of users 10,the problem is this that Server has applied restriction on my account so that I can use only 512kbps out of 1Mb(DSL).Is there any way so that I can Obtained full speed in presence of restriction?

No, there isn't. It's call a "restriction" for a reason. The only way to get around that would be to schmooze up the LAN Admins.

sarfarazaliqureshi wrote:
2. Second problem is this that I want to hide my self from appearing in the Server Report(Windows 2003 Server) which shows that How Much I have downloaded the Data From Internet(Amount of Internet I used)?

Considering your network access is going straight through that server, this isn't going to happen.

Look, what you want to do isn't possible unless you undertake drastic actions, which we're not going to help you do because we're not going to be complicit in your getting fired or sue by the company you work for.

A guide to posting questions on CodeProject[^]

Dave Kreskowiak
Microsoft MVP
Visual Developer - Visual Basic
2006, 2007, 2008

Re: Problem In Network

sarfarazaliqureshi26-Mar-09 4:12

sarfarazaliqureshi

26-Mar-09 4:12

ok dear but Then what is the function of transparent IPs...They are not a part of my solution?

Re: Problem In Network

Dave Kreskowiak26-Mar-09 7:46

Dave Kreskowiak

26-Mar-09 7:46

There is nothing you can do from your workstation to circumvent the restrictions. "Transparent IP's" won't help you. They would ponly be of use to a network admin, not a user.

A guide to posting questions on CodeProject[^]

Dave Kreskowiak
Microsoft MVP
Visual Developer - Visual Basic
2006, 2007, 2008

NTUser Folder and File Access Rules

Glen Harvy25-Mar-09 13:34

Glen Harvy

25-Mar-09 13:34

Hi,

I am programmatically adding an Access Rule to a file for BUILTIN\Users and giving them Full Control. The same file also inherits from it's folder an Access Rule for BUILTIN\Users with lower control levels.

My Question is, you can apparently set as many rules as there are combinations for a NTUser BUT which one will apply? Hopefully in the above case, Full Control will be granted.

My second question - will the same apply to folders.

Thanks,

Glen

Glen Harvy

Re: NTUser Folder and File Access Rules

green2go26-Mar-09 11:05

green2go

26-Mar-09 11:05

Hi Glen,

If my memories of MS FS training serve me correctly deny takes precedence over all other permissions (even if you add explicit allow full control permissions to an object). The same is true for folders.

For example, BULITIN\Joe has allow read-only permissions for a folder named ‘test’. The folder ‘test’ has a file within it which is inheriting permissions. You then add a permission to the file to allow him full control. The result will be that Joe will have full control as the inherited permission will be superseded by the explicit permission. However, if the allow read-only permission in the example above was changed to deny, the allow full control permission set on the object would be superdeded by the deny permission.

KR

Oliver

Posting Guidelines | Blog of the month

Re: NTUser Folder and File Access Rules

Glen Harvy29-Mar-09 11:28

Glen Harvy

29-Mar-09 11:28

Hi Oliver,

First, my sincere thanks for responding. I have delayed answering because I wanted to look further into this and do some testing.

As you can see from the following, you can have different permissions for the same NTUser Account:

2009-03-26 17:12:51.6832 TestVista.Form1 Captured the ------------ BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 IdentityReference.Value: BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 AccessControlType: Allow
2009-03-26 17:12:51.6832 TestVista.Form1 FileSystemRights: FullControl
2009-03-26 17:12:51.6832 TestVista.Form1 InheritanceFlags: ContainerInherit, ObjectInherit
2009-03-26 17:12:51.6832 TestVista.Form1 IsInherited: False
2009-03-26 17:12:51.6832 TestVista.Form1 PropagationFlags: None
<-->
2009-03-26 17:12:51.6832 TestVista.Form1 Captured the ------------ BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 IdentityReference.Value: BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 AccessControlType: Allow
2009-03-26 17:12:51.6832 TestVista.Form1 FileSystemRights: ReadAndExecute, Synchronize
2009-03-26 17:12:51.6832 TestVista.Form1 InheritanceFlags: ContainerInherit, ObjectInherit
2009-03-26 17:12:51.6832 TestVista.Form1 IsInherited: True
2009-03-26 17:12:51.6832 TestVista.Form1 PropagationFlags: None
2009-03-26 17:12:51.6832 TestVista.Form1 Captured the ------------ BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 IdentityReference.Value: BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 AccessControlType: Allow
2009-03-26 17:12:51.6832 TestVista.Form1 FileSystemRights: AppendData
2009-03-26 17:12:51.6832 TestVista.Form1 InheritanceFlags: ContainerInherit
2009-03-26 17:12:51.6832 TestVista.Form1 IsInherited: True
2009-03-26 17:12:51.6832 TestVista.Form1 PropagationFlags: None
2009-03-26 17:12:51.6832 TestVista.Form1 Captured the ------------ BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 IdentityReference.Value: BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 AccessControlType: Allow
2009-03-26 17:12:51.6832 TestVista.Form1 FileSystemRights: CreateFiles
2009-03-26 17:12:51.6832 TestVista.Form1 InheritanceFlags: ContainerInherit
2009-03-26 17:12:51.6832 TestVista.Form1 IsInherited: True
2009-03-26 17:12:51.6832 TestVista.Form1 PropagationFlags: None

This at first confused me immensely but your comments and my searching has helped me understand a lot more. First, explicitly set permissions override inherited permissions, deny has precedence and cannot be later overridden and that the permissions are (at the end of the day) effectively amalgamated when it comes to NT allowing or denying an action.

What I am still working on is when are the permissions effectively updated? For example:

If I change the permissions on a folder with the proper propagation flags, do the files that are already contained within the folder (or should that read container!) get the new inherited permissions immediately or does each file already in the container need to have these new permissions specifically set?

What's prompting this questioning is that my installer (InstallAware) applies permissions set by me correctly but not in Vista notwithstanding that the installer has elevated privileges. I know - ask InstallAware however they are less than helpful to novices at the best of times!).

Regards,
Glen.

Glen Harvy

Mailing

Ch.Gayatri Subudhi25-Mar-09 1:09

Ch.Gayatri Subudhi

25-Mar-09 1:09

By using asp.net
protected void Sndbtn_Click(object sender, ImageClickEventArgs e)
{
SmtpClient serverobj = new SmtpClient();
serverobj.Credentials = new NetworkCredential(Frmtxt.Text, Pswtxt.Text);
serverobj.Host = "smtp.gmail.com";
Totxt.Text = "gayatri.subudhi@gmail.com";
serverobj.Port = 587;
serverobj.EnableSsl = true;
msgobj = new MailMessage();
msgobj.From = new MailAddress(Frmtxt.Text , "gai3", System.Text.Encoding.UTF8);
msgobj.To.Add(Totxt.Text);
msgobj.Subject = Subtxt.Text;
msgobj.Body = Messtxt.Text;
msgobj.DeliveryNotificationOptions = DeliveryNotificationOptions.OnFailure;
msgobj.IsBodyHtml = true;
serverobj.Send(msgobj);
Lbl.Text = "MAIL SENT SUCCESSFULLY.......!";

}
this code will work for gmail messageing..but ineed

I need to mail for all type of IDS like yahoo,gmail ,reddiff etc. what will the port no. and server host will used..
and another one without giving password ,by giving email id how to sent mess to administration.please suggest me.Thanks in advance.

With Regards
Ch.Gayatri Subudhi

Administrators tools is empty

Vimalsoft(Pty) Ltd24-Mar-09 21:57

Vimalsoft(Pty) Ltd

24-Mar-09 21:57

Good Morning all

in my PC am a Local Administrator. but when i go to

Control Panel --> Administrators Tools --> i dont see any Contents.

Please help

Thank you

Vuyiswa Maseko,

Few companies that installed computers to reduce the employment of clerks have realized their expectations.... They now need more and more expensive clerks even though they call them "Developers" or "Programmers."

C#/VB.NET/ASP.NET/SQL7/2000/2005/2008
http://www.vuyiswamaseko.tiyaneProperties.co.za
vuyiswa@its.co.za
www.ITS.co.za

Re: Administrators tools is empty

Mekong River26-Mar-09 16:04

Mekong River

26-Mar-09 16:04

The content in this folder is a shortcut only. Try to copy this shortcut from the other machine which has the same version of your computer and service pack and paste it in your empty folder of administrative tools.

Re: Administrators tools is empty

Jordan198230-Mar-09 12:23

Jordan1982

30-Mar-09 12:23

Run a search for .msc files in the System32 folder and recreate the shortcuts to the following location:

C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools

That should get you back up and running. I think there is a utility available that will do this automatically - google "admin tools replacement" and you should get a few hits.

Hope this helps

Re: Administrators tools is empty

Vimalsoft(Pty) Ltd30-Mar-09 20:11

Vimalsoft(Pty) Ltd

30-Mar-09 20:11

Thank you very much. That has solved my problem.

Thank you

Windows New Hardware Found wizard is not coming...

Sifar - 024-Mar-09 2:06

Sifar - 0

24-Mar-09 2:06

Hi,

I have a device that work on Serial Port. I am using Windows XP.
When I plug in this device, Windows New Hardware found wizard does not open everytime.

This problem is sporadic, i.e. I do not face it everytime when I attach the device.

Any suggestion will be helpful..

Regards,
-SIFAR.

Re: Windows New Hardware Found wizard is not coming...

Mekong River2-Apr-09 16:51

Mekong River

2-Apr-09 16:51

Try to restart the machine or go to device manager and right click on your computer name and click scan for new hardware.

Windows 2003 Printing Problem

deezZ22-Mar-09 18:41

deezZ

22-Mar-09 18:41

Hi,
I have setup 2 Windows 2003 Standard Edition Servers.
On one of the server people do a remote login and access their data from the another server through map network drive.
I am facing one severe problem... after the employee takes our one printout , he has to log off and log back in to take another print, otherwise the print comes out with some missing data, or blank.
Please help me to solve this problem.

Thanks in advance.

Monitoring Internet usage by IP address in ISA Server 2004

misCafe22-Mar-09 15:49

misCafe

22-Mar-09 15:49

Dear everyone,

I'm very new on ISA Server 2004. I wanna monitor the Internet usage by IP Address, it seems it is going to be over plan for my Internet usage here. Anyone who can help me on this topic?

Regards,

Visoth

"failed to read IISWebs table" -2147024891

Brady Kelly22-Mar-09 0:13

Brady Kelly

22-Mar-09 0:13

I'm getting the following error message trying to install IIS 6 sample code¹ on a Vista + IIS 7 laptop, even when running as admin. Several Google searches have proved fruitless.

My next option is to attempt a manual extraction of the necessary files from the MSI database. Any help in how to do this would really be appreciated.

1 Dino Esposito's Programming Microsoft ASP.NET 2.0 Applications - Advanced Topics.

Re: "failed to read IISWebs table" -2147024891

Jörgen Andersson23-Mar-09 10:56

Jörgen Andersson

23-Mar-09 10:56

Is your website still called "Default Website" with IP Address set to "(All Unassigned)" and with TCP Port set to "80"?

Re: "failed to read IISWebs table" -2147024891

Brady Kelly23-Mar-09 20:31

Brady Kelly

23-Mar-09 20:31

Yes, but this is no longer a problem though. I have extracted the sample code from the .msi and it works fine.

Reading out resources from executable file

Lungsta21-Mar-09 2:28

Lungsta

21-Mar-09 2:28

Hi! I need help reading out resources from an executable file using either VB6 or VB.NET 2005.

What I mean is, there's an executable file that contains resources that I need. So, basically, I need a code that will will read the resources from that file in VB6 or VB.NET 2005.

Any help will be very much appreciated.

Thanking you in advance,
Lunga! Smile | :)

Problem of Same DNS refer 2 two different web site in IIS

slSoftware20-Mar-09 17:51

slSoftware

20-Mar-09 17:51

hi All

I wanted to create 2 web site in IIS, but im using same DNS for both, when 1 is start other will stop automatically, i developed those two web sites using VS.net 2.0,so my problem is when i configure like that in IIS, its display the error like "Web site not found" sumting like that, pls help me to solve this problem

Thanks

Insufficient system resources exist to complete the requested service.

SNI18-Mar-09 4:44

SNI

18-Mar-09 4:44

Hi,
I am launching my application which is an MDI application which does some injection to the processes. After keeping my system idle for some time (40 min) I am getting "Insufficient system resources exist to complete the requested service." message. Same time I am checking with Application event viewer which shows following error message. We have installed Service Pack 3 for Windows XP.
---------------------------------------------------------------------------------------------------
Error
*****
The description for Event ID ( 20 ) in Source ( Google Update ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Network Request Error.
Error: 0x80042197. Http status code: 407.
Url=https://tools.google.com/service/update2
Trying config: source=IE, named proxy=proxych1.techmahindra.com:8080, bypass=*.techmahindra.com;10.*.*.*;172.*.*.*;192.*.*.*;<local>.
trying CUP:WinHTTP.
Send request returned 0x80042197. Http status code 407.
trying WinHTTP.
Send request returned 0x80042197. Http status code 407.
trying CUP:Browser.
Send request returned 0x80004005. Http status code 0.
Trying config: source=winhttp, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:Browser.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:Browser.
Send request returned 0x80004005. Http status code 0
---------------------------------------------------------------------------------------------------

Please let us know what could be the problem out here. When I am trying to get GetLastError it gives me "0" as there is no problem.

Thanks
SNI

SNI

Last Visit: 31-Dec-99 18:00 Last Update: 8-May-24 17:44

Refresh

ᐊ Prev 1...66 67 68 697071 72 73 74 75 Next ᐅ

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.