Re: NTUser Folder and File Access Rules - System Admin Discussion Boards

Hello,
I found the error "Service Unavailable" caused by "Application pool 'DefaultAppPool' is being automatically disabled due to a series of failures in the process(es) serving that application pool."

Thanks,

Dear Friends,

Please help me I have Two Problems....

1. Actually I am a client of a LAN of users 10,the problem is this that Server has applied restriction on my account so that I can use only 512kbps out of 1Mb(DSL).Is there any way so that I can Obtained full speed in presence of restriction?

2. Second problem is this that I want to hide my self from appearing in the Server Report(Windows 2003 Server) which shows that How Much I have downloaded the Data From Internet(Amount of Internet I used)?

Please help me if any body can

Thanks

sarfarazaliqureshi wrote:
1. Actually I am a client of a LAN of users 10,the problem is this that Server has applied restriction on my account so that I can use only 512kbps out of 1Mb(DSL).Is there any way so that I can Obtained full speed in presence of restriction?

No, there isn't. It's call a "restriction" for a reason. The only way to get around that would be to schmooze up the LAN Admins.

sarfarazaliqureshi wrote:
2. Second problem is this that I want to hide my self from appearing in the Server Report(Windows 2003 Server) which shows that How Much I have downloaded the Data From Internet(Amount of Internet I used)?

Considering your network access is going straight through that server, this isn't going to happen.

Look, what you want to do isn't possible unless you undertake drastic actions, which we're not going to help you do because we're not going to be complicit in your getting fired or sue by the company you work for.

A guide to posting questions on CodeProject[^]

Dave Kreskowiak
Microsoft MVP
Visual Developer - Visual Basic
2006, 2007, 2008

ok dear but Then what is the function of transparent IPs...They are not a part of my solution?

There is nothing you can do from your workstation to circumvent the restrictions. "Transparent IP's" won't help you. They would ponly be of use to a network admin, not a user.

A guide to posting questions on CodeProject[^]

Dave Kreskowiak
Microsoft MVP
Visual Developer - Visual Basic
2006, 2007, 2008

Hi,

I am programmatically adding an Access Rule to a file for BUILTIN\Users and giving them Full Control. The same file also inherits from it's folder an Access Rule for BUILTIN\Users with lower control levels.

My Question is, you can apparently set as many rules as there are combinations for a NTUser BUT which one will apply? Hopefully in the above case, Full Control will be granted.

My second question - will the same apply to folders.

Thanks,

Glen

Glen Harvy

Hi Glen,

If my memories of MS FS training serve me correctly deny takes precedence over all other permissions (even if you add explicit allow full control permissions to an object). The same is true for folders.

For example, BULITIN\Joe has allow read-only permissions for a folder named ‘test’. The folder ‘test’ has a file within it which is inheriting permissions. You then add a permission to the file to allow him full control. The result will be that Joe will have full control as the inherited permission will be superseded by the explicit permission. However, if the allow read-only permission in the example above was changed to deny, the allow full control permission set on the object would be superdeded by the deny permission.

KR

Oliver

Posting Guidelines | Blog of the month

Hi Oliver,

First, my sincere thanks for responding. I have delayed answering because I wanted to look further into this and do some testing.

As you can see from the following, you can have different permissions for the same NTUser Account:

2009-03-26 17:12:51.6832 TestVista.Form1 Captured the ------------ BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 IdentityReference.Value: BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 AccessControlType: Allow
2009-03-26 17:12:51.6832 TestVista.Form1 FileSystemRights: FullControl
2009-03-26 17:12:51.6832 TestVista.Form1 InheritanceFlags: ContainerInherit, ObjectInherit
2009-03-26 17:12:51.6832 TestVista.Form1 IsInherited: False
2009-03-26 17:12:51.6832 TestVista.Form1 PropagationFlags: None
<-->
2009-03-26 17:12:51.6832 TestVista.Form1 Captured the ------------ BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 IdentityReference.Value: BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 AccessControlType: Allow
2009-03-26 17:12:51.6832 TestVista.Form1 FileSystemRights: ReadAndExecute, Synchronize
2009-03-26 17:12:51.6832 TestVista.Form1 InheritanceFlags: ContainerInherit, ObjectInherit
2009-03-26 17:12:51.6832 TestVista.Form1 IsInherited: True
2009-03-26 17:12:51.6832 TestVista.Form1 PropagationFlags: None
2009-03-26 17:12:51.6832 TestVista.Form1 Captured the ------------ BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 IdentityReference.Value: BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 AccessControlType: Allow
2009-03-26 17:12:51.6832 TestVista.Form1 FileSystemRights: AppendData
2009-03-26 17:12:51.6832 TestVista.Form1 InheritanceFlags: ContainerInherit
2009-03-26 17:12:51.6832 TestVista.Form1 IsInherited: True
2009-03-26 17:12:51.6832 TestVista.Form1 PropagationFlags: None
2009-03-26 17:12:51.6832 TestVista.Form1 Captured the ------------ BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 IdentityReference.Value: BUILTIN\Users
2009-03-26 17:12:51.6832 TestVista.Form1 AccessControlType: Allow
2009-03-26 17:12:51.6832 TestVista.Form1 FileSystemRights: CreateFiles
2009-03-26 17:12:51.6832 TestVista.Form1 InheritanceFlags: ContainerInherit
2009-03-26 17:12:51.6832 TestVista.Form1 IsInherited: True
2009-03-26 17:12:51.6832 TestVista.Form1 PropagationFlags: None

This at first confused me immensely but your comments and my searching has helped me understand a lot more. First, explicitly set permissions override inherited permissions, deny has precedence and cannot be later overridden and that the permissions are (at the end of the day) effectively amalgamated when it comes to NT allowing or denying an action.

What I am still working on is when are the permissions effectively updated? For example:

If I change the permissions on a folder with the proper propagation flags, do the files that are already contained within the folder (or should that read container!) get the new inherited permissions immediately or does each file already in the container need to have these new permissions specifically set?

What's prompting this questioning is that my installer (InstallAware) applies permissions set by me correctly but not in Vista notwithstanding that the installer has elevated privileges. I know - ask InstallAware however they are less than helpful to novices at the best of times!).

Regards,
Glen.

Glen Harvy

By using asp.net
protected void Sndbtn_Click(object sender, ImageClickEventArgs e)
{
SmtpClient serverobj = new SmtpClient();
serverobj.Credentials = new NetworkCredential(Frmtxt.Text, Pswtxt.Text);
serverobj.Host = "smtp.gmail.com";
Totxt.Text = "gayatri.subudhi@gmail.com";
serverobj.Port = 587;
serverobj.EnableSsl = true;
msgobj = new MailMessage();
msgobj.From = new MailAddress(Frmtxt.Text , "gai3", System.Text.Encoding.UTF8);
msgobj.To.Add(Totxt.Text);
msgobj.Subject = Subtxt.Text;
msgobj.Body = Messtxt.Text;
msgobj.DeliveryNotificationOptions = DeliveryNotificationOptions.OnFailure;
msgobj.IsBodyHtml = true;
serverobj.Send(msgobj);
Lbl.Text = "MAIL SENT SUCCESSFULLY.......!";

}
this code will work for gmail messageing..but ineed

I need to mail for all type of IDS like yahoo,gmail ,reddiff etc. what will the port no. and server host will used..
and another one without giving password ,by giving email id how to sent mess to administration.please suggest me.Thanks in advance.

With Regards
Ch.Gayatri Subudhi

Good Morning all

in my PC am a Local Administrator. but when i go to

Control Panel --> Administrators Tools --> i dont see any Contents.

Please help

Thank you

Vuyiswa Maseko,

Few companies that installed computers to reduce the employment of clerks have realized their expectations.... They now need more and more expensive clerks even though they call them "Developers" or "Programmers."

C#/VB.NET/ASP.NET/SQL7/2000/2005/2008
http://www.vuyiswamaseko.tiyaneProperties.co.za
vuyiswa@its.co.za
www.ITS.co.za

The content in this folder is a shortcut only. Try to copy this shortcut from the other machine which has the same version of your computer and service pack and paste it in your empty folder of administrative tools.

Run a search for .msc files in the System32 folder and recreate the shortcuts to the following location:

C:\Documents and Settings\All Users\Start Menu\Programs\Administrative Tools

That should get you back up and running. I think there is a utility available that will do this automatically - google "admin tools replacement" and you should get a few hits.

Hope this helps

Thank you very much. That has solved my problem.

Thank you

Vuyiswa Maseko,

Few companies that installed computers to reduce the employment of clerks have realized their expectations.... They now need more and more expensive clerks even though they call them "Developers" or "Programmers."

C#/VB.NET/ASP.NET/SQL7/2000/2005/2008
http://www.vuyiswamaseko.tiyaneProperties.co.za
vuyiswa@its.co.za
www.ITS.co.za

Hi,

I have a device that work on Serial Port. I am using Windows XP.
When I plug in this device, Windows New Hardware found wizard does not open everytime.

This problem is sporadic, i.e. I do not face it everytime when I attach the device.

Any suggestion will be helpful..

Regards,
-SIFAR.

Try to restart the machine or go to device manager and right click on your computer name and click scan for new hardware.

Hi,
I have setup 2 Windows 2003 Standard Edition Servers.
On one of the server people do a remote login and access their data from the another server through map network drive.
I am facing one severe problem... after the employee takes our one printout , he has to log off and log back in to take another print, otherwise the print comes out with some missing data, or blank.
Please help me to solve this problem.

Thanks in advance.

Dear everyone,

I'm very new on ISA Server 2004. I wanna monitor the Internet usage by IP Address, it seems it is going to be over plan for my Internet usage here. Anyone who can help me on this topic?

Regards,

Visoth

I'm getting the following error message trying to install IIS 6 sample code¹ on a Vista + IIS 7 laptop, even when running as admin. Several Google searches have proved fruitless.

My next option is to attempt a manual extraction of the necessary files from the MSI database. Any help in how to do this would really be appreciated.

1 Dino Esposito's Programming Microsoft ASP.NET 2.0 Applications - Advanced Topics.

Is your website still called "Default Website" with IP Address set to "(All Unassigned)" and with TCP Port set to "80"?

Yes, but this is no longer a problem though. I have extracted the sample code from the .msi and it works fine.

Hi! I need help reading out resources from an executable file using either VB6 or VB.NET 2005.

What I mean is, there's an executable file that contains resources that I need. So, basically, I need a code that will will read the resources from that file in VB6 or VB.NET 2005.

Any help will be very much appreciated.

Thanking you in advance,
Lunga! Smile | :)

hi All

I wanted to create 2 web site in IIS, but im using same DNS for both, when 1 is start other will stop automatically, i developed those two web sites using VS.net 2.0,so my problem is when i configure like that in IIS, its display the error like "Web site not found" sumting like that, pls help me to solve this problem

Thanks

Hi,
I am launching my application which is an MDI application which does some injection to the processes. After keeping my system idle for some time (40 min) I am getting "Insufficient system resources exist to complete the requested service." message. Same time I am checking with Application event viewer which shows following error message. We have installed Service Pack 3 for Windows XP.
---------------------------------------------------------------------------------------------------
Error
*****
The description for Event ID ( 20 ) in Source ( Google Update ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Network Request Error.
Error: 0x80042197. Http status code: 407.
Url=https://tools.google.com/service/update2
Trying config: source=IE, named proxy=proxych1.techmahindra.com:8080, bypass=*.techmahindra.com;10.*.*.*;172.*.*.*;192.*.*.*;<local>.
trying CUP:WinHTTP.
Send request returned 0x80042197. Http status code 407.
trying WinHTTP.
Send request returned 0x80042197. Http status code 407.
trying CUP:Browser.
Send request returned 0x80004005. Http status code 0.
Trying config: source=winhttp, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:Browser.
Send request returned 0x80004005. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying WinHTTP.
Send request returned 0x80072ee2. Http status code 0.
trying CUP:Browser.
Send request returned 0x80004005. Http status code 0
---------------------------------------------------------------------------------------------------

Please let us know what could be the problem out here. When I am trying to get GetLastError it gives me "0" as there is no problem.

Thanks
SNI

SNI

HTTP Error 407 is a proxy authentification error. So, maybe, you did not supply username and password for your proxy?

Cheers,
Sebastian

--
"If it was two men, the non-driver would have challenged the driver to simply crash through the gates. The macho image thing, you know." - Marc Clifton

Hi Friends,
IIS 5.1 SMTP virtual Server doesn't show in inetmgr I am using win XP. Admin login "IIS 5.1 SMTP virtual Server" showed but doesn't shown in user login what i do..

plz help me..