Hello Everyone,
I have been running a secure web server in Server 2003 using NTFS permissions to dictate what groups can access.
Unfortunately due to the secure nature of the web server the only way to access and upload things to the server is via sftp, currently the sftp client used here is FileZilla.
While all the original files on the server were migrated by me the administrator and permissions were set up during the migration, unknown to me all the new files being uploaded were being owned by the user that did the upload and permissions set to whatever they were on the users local machine.
Now, as the title has stated I am looking for a way to force the permissions applied to the NTFS file structure to be inherited from the parent folder of where they are uploaded to.
I have come across a couple vague references to changing of the config file or try and script a force of file permissions in the scheduled tasks. Unfortunately I do not have enough experience with either to understand what would be required and how it would work to proceed on either front.
I would greatly appreciate any help or pointers to get me headed in the right direction.
Thanks,
Jonathon
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
thank you,
I actually came across that link about an hour ago in my research and am in the middle of reading the documentation for it to see if it will work for my needs. knowing this is what you suggest I will proceed on that front exclusively then.
I was hoping there would be a line in the ssh_config or sshd_config files to force the inheritance but I have been unable to locate one.
xcacls seems to be a very powerful command that can accomplish much.
Jonathon
Business Accounts
Answer for Membership
by: schristePosted on 2009-10-23 at 13:06:01ID: 25648024
You are going to have to have your users change the file's permsissions before uploading. at the very least, give the Users Group Full access.
I'd then suggest a scheduled batch job to run, under admin level rights, and set the necessary permissions.
Investigate the usefullness of the "cacls" command and command line management of group permissions with it.
First step - take ownership, then push necessary settings.
http://support.microsoft.c