On Thu, May 22, 2008 at 6:35 AM, Stephen Kojoukhine <
[EMAIL PROTECTED]> wrote:

>  My share is hosted on a Windows Server 2k3 SP2 by the way. When I created
> my install share, I assigned it the following permissions:
>
> Are you talking Share permissions or NTFS permissions or both?


> NOTE: OsDeploy is a straggler group, it doesn't belong to anything else,
> not even Users.
>
> That's fine.

> After the permissions were set as above, I ran ./prepare. And what I
> noticed during my troubleshooting is that the folders created inside my
> packages and updates had their ownership changed to Administrator (not
> Administrators) as that is the account I was using. Of course, on the
> surface this doesn't sound like it would pose a problem (as far as I know)
> as the other permissions above propagated just fine. However, as I mentioned
> in my previous email, I was denied access to execute files from my Z_Share.
>
> File ownership in Windows means almost absolutely nothing in terms of file
permissions or file access.  You can even disallow an owner from reading a
file or folder.  However, an owner can change the permissions so they can
access said files or folders.  "guest" could be the owner of the files and
folders and as long as the Share and NTFS permissions allowed someone at
least read access to the folders and files, they could access them.

> I'm wondering, is Windows just retarded when creating child folders/files
> and intelligently assigning permissions? Or is it something the scripts do
> wrong, although looking at the scripts I don't see any tinkering with
> permissions, and can't imagine a reason to have them do so anyway.
>
I'd double check your permissions and make sure that your OsDeploy group had
read permissions through the ntinstall share as well as at the NTFS level.
But it sounds like when you reapplied ownership it reapplied the permissions
and all is well again.

I'd also make sure you're not dealing with the deny bit set on any of your
permission settings to remove that layer of complexity.

kevin
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
unattended-info mailing list
unattended-info@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/unattended-info

Reply via email to