[<<]Message[>>]    [<<]Author[>>]        Subject[>>]        Thread[>>]

Number   :  4557
Date     :  2003-05-09
Author   :  Garry Deane
Subject  :  Problem with security permission copy on NT4
Size(KB) :  3


Kan,

I was experimenting with xxcopying security permissions on
an NTFS4 drive under NT4 and xxcopy failed to correctly set
the permissions on a destination directory where the source
had non-default settings.

I set up a test directory as follows with a file in each:

f:\src\ - Everyone:Full access (default)
f:\src\default-settings\ - Everyone:Full access
f:\src\custom-settings\ - Everyone:Full access + \\N0_12\Garry:Full 
access

I then copied this to F:\dst\ using /SC1. The log file is below:

=====================================================================
XXCOPY ver 2.84.0 2003-05-09 18:51:54
Command Line = xxcopy f:\src\ f:\dst\ /sc1/e/onxxcopy.log
---------------------------------------------------------------------
Switch Parameters
/AXH /AXS /B0 /C /CB0 /CCY /CK /CL1G /CR3 /D0 /DL0 /E /EC0 /ED0 /ER0
/F0 /FM0 /FF0 /FL /FT0 /FW /H0 /I0 /IN* /K0 /L0 /N0 /NP0 /NX /NI0
/NW /NC0 /oND:\xxcopy.log /oD1 /oE0 /oF1 /oI0 /oP0 /oS0 /oX0 /P0 
/PB0 /PC0 /PD0 /PN /Po /PZ0 /Q0 /QF0 /QB0 /QS0 /R0 /S /SC /SP0 /SG0
/SX0 SZ:- /T0 /TR00 /TS0 /TD0 /TTA0 /TCA0 /TCC0 /TCW /TM0 /U0
/V0 /W0 /WD /WV /Z0 /ZE0 /ZS0 /ZX0
---------------------------------------------------------------------
Source base directory = "F:\src\"
Destination directory = "F:\dst\"
File name template = "*"
Directories processed = 3
Total data in bytes = 9
Elapsed time in sec. = 0.301
Action speed (MB/min) = 0.001794
Files copied = 3
Directories created = 3
Log File Created = D:\xxcopy.log
Exit code = 0 (No error, Successful operation)

Although no errors were reported, I was unable to access 
f:\dst\custom-settings\ getting access denied errors.
Both f:\dst\ and f:\dst\default-settings\ were accessible.

When I used explorer-properties-security to examine
f:\dst\custom-settings\, I received the following error message:

"The security information for F:\dst\Custom-settings is not
standard and cannot be displayed. Windows NT 3.x and 4.x support
certain features such as Deny Access Control Entries but cannot
edit security information which uses these features. The
information may have been modified by a computer running Windows
NT 5.0, which supports these features and can edit information
which uses them.
Do you want to overwrite the current security information?"

I selected yes and was then able to set up new permissions and
access the directory.

I deleted f:\dst\ and repeated the xxcopy command and received
the same error but tried to access the directory from a W2k 
machine. As a normal (power) user or administrator, access was
denied. In W2k-explorer-properties as a normal user, the security
tab was missing. In W2k-explorer-properties-security as an
administrator, the permissions showed as an empty table.

I then ran cacls on the src and dst directories and got the
following:

D:\>cacls f:\src\default-settings
f:\src\Default-settings Everyone:F
Everyone:(OI)(CI)(IO)F

D:\>cacls f:\dst\default-settings
f:\dst\Default-settings Everyone:F
Everyone:(OI)(CI)(IO)F

D:\>cacls f:\src\custom-settings
f:\src\Custom-settings NO_12\Garry:(OI)(IO)F
NO_12\Garry:(CI)F
Everyone:(OI)(IO)F
Everyone:(CI)F

D:\>cacls f:\dst\custom-settings
f:\dst\Custom-settings NO_12\Garry:(OI)(CI)(IO)F
Everyone:(OI)(CI)(IO)F

The permissions appear to be OK but obviously there is something
wrong.

Garry



This message if part of XXCOPY's message Archive.
The archive contains all the messages posted at Yahoo!Groups: XXCOPY.