Good morning! I have created case SRX090804600022 to track our work for your request. One of my team colleagues will take ownership of the case and contact you shortly.
Regards, Bill Wesse MCSE, MCTS / Senior Escalation Engineer, US-CSS DSC PROTOCOL TEAM 8055 Microsoft Way Charlotte, NC 28273 TEL: +1(980) 776-8200 CELL: +1(704) 661-5438 FAX: +1(704) 665-9606 From: Nadezhda Ivanova [mailto:[email protected]] Sent: Tuesday, August 04, 2009 3:58 AM To: Interoperability Documentation Help Cc: [email protected]; [email protected] Subject: Question about owner and group defaulting rules in MS-ADTS Hi, In MS-ADTS, section 7.1.3.6, is written the following: The GROUP field is defaulted as follows: * If the DAG was used as the default OWNER field value, then the same SID is written into the GROUP field. However, it appears that the creating user's primary group is ALWAYS used as the default group, regardless of partition or owner. Example: We create an object in the domain partition, say an OU, without providing an nTSecurityDescriptor. The creating user is a member of Domain Admins, with primary group Domain Users, so the DAG is Domain admins as per the DAG rules in the same document. Domain Admins is used as the OWNER in the new object's security descriptor. According to the above statement, Domain Admins should also be set as the default group. However, in a Windows 2003 server, Domain Users is defaulted as the group in the new object's descriptor. If the user's primary group is changed to Domain Admins, then the group of the new object is defaulted to Domain Admins. The above behavior is consistent with CreateSecurityDescriptor algorithm from MS-DTYP, where the primary group of the security token is assigned if a group is not provided. Could you please clarify the contradiction between MS-ADTS, MS-DTYP and actual behavior? Regards, Nadezhda Ivanova [cid:[email protected]] Nadezhda Ivanova Software Engineer Software Development [email protected]<mailto:[email protected]> CISCO SYSTEMS BULGARIA EOOD 18 Macedonia Blvd. Sofia 1606 Bulgaria Cisco home page<http://www.cisco.com/global/BG/> [cid:[email protected]]Think before you print.
<<inline: image001.gif>>
<<inline: image002.gif>>
_______________________________________________ cifs-protocol mailing list [email protected] https://lists.samba.org/mailman/listinfo/cifs-protocol
