Directory Security and Access Rules

ACLs | Pearltrees

ACLs | Pearltrees — Fri, 12 May 2017 20:12:54 GMT

Pingback from ACLs | Pearltrees

re: Directory Security and Access Rules

Camille Le Mouëllic — Wed, 12 Oct 2011 08:14:48 GMT

Hi Ric, Paul,

I've wrote a post on the different Security Descriptors' Inheritance and Propagation file possibilities, including "File Only"

Have a check:

camillelemouellic.blog.com/.../powershell-security-descriptors-inheritance-and-propagation-flag-possibilities

(It's aimed at Powershell, but it's using .NET all the same, it might prove useful to you).

re: Directory Security and Access Rules

Paul Bergson — Wed, 08 Dec 2010 13:52:09 GMT

I also needed "File Only" and after a whole bunch of playing I started dumping the access property:

Get-Acl fileLocation |select -ExpandProperty access

This allowed me to make comparisons and I found that by the following two settings I was able to get things to work:

$InheritanceFlag = "ObjectInherit"

$PropagationFlag = "InheritOnly"

re: Directory Security and Access Rules

Ric — Thu, 28 May 2009 22:51:16 GMT

Nevermind, maybe it was a silly question but I figured it out:

(InheritanceFlags.ObjectInherit), PropagationFlags.InheritOnly

Thanks again for the nice article. It really did help!

re: Directory Security and Access Rules

Ric — Wed, 27 May 2009 18:20:58 GMT

I see this is an old thread but a great article and the chart above has proven to be very helpful.

I was wondering though it there is a "FILES ONLY" setting?

re: Directory Security and Access Rules

Resimler — Mon, 14 Apr 2008 15:21:26 GMT

thank you Damir Dobric.This is very good information,I like this blog,thanx your time and effort.

re: Directory Security and Access Rules

daree — Thu, 30 Aug 2007 13:08:11 GMT

Thanks for your prompt help Damir, i was just wondering because it works well with application but the same thing doesn't work with Windows Service.

i will try out few more techniques may be i'm missing out something.

re: Directory Security and Access Rules

Damir Dobric — Thu, 30 Aug 2007 13:03:05 GMT

If that account has not permission to the folder, then it will not work?!

re: Directory Security and Access Rules

daree — Thu, 30 Aug 2007 12:45:22 GMT

it is running as system

re: Directory Security and Access Rules

Damir Dobric — Thu, 30 Aug 2007 12:43:29 GMT

It seems that the user under the service is running has different permissions than the interactive user (you), who starts the application. I would check the permissions of the user running the service (System, LocalService, Network Service etc.).

re: Directory Security and Access Rules

daree — Thu, 30 Aug 2007 12:35:10 GMT

thanks Damir,

My actual problem is, lets say if i remove all the security from the directory, the program cant get the access control for that particular folder (when i run my program as a windows service). however, if i create an application and run the code it works fine. it is because windows Service cant get the access control for any directory?

re: Directory Security and Access Rules

Damir Dobric — Thu, 30 Aug 2007 12:10:05 GMT

I’m not sure what your problem is. However, It could be that the operative system you use is not the English one. For example on the German system there is no group “everyone”. That group is called in German “jeder”.

Try to use the generic naming of groups and not hard coded names.

re: Directory Security and Access Rules

daree — Thu, 30 Aug 2007 11:51:21 GMT

i compiled the exact same code in Windows Service, it doesn't work. somhow it crash in like DirectorySecurity dirSec = Directory.GetAccessControl(dir);

» PowerShell: Set-Acl Does Not Appear to Work

» PowerShell: Set-Acl Does Not Appear to Work — Sat, 28 Jul 2007 22:07:00 GMT

Pingback from » PowerShell: Set-Acl Does Not Appear to Work

re: Directory Security and Access Rules

Chrissy — Mon, 23 Jul 2007 06:46:20 GMT

That list contained exactly what I needed to know! Thank you!