Solved

icacls permissions suddenly seems to change for certain workstations in domain

Posted on 2014-04-09
6
523 Views
Last Modified: 2014-04-24
AD-domain on 2003-servers
Windows 7 workstations defined in AD
Users is logging on domain, and local non-admin rights

The last weeks I have stuggled with user-permissions on desktop and taskbar links (and other files too).
Issue havn't been reported at all before ca 4 weeks ago.

The user/workstation can run fine for a couple of days, the suddenly for only some users/workstations it seems  that the user-rights to desktop-links aso is changed.
The users are prompted for:

"Open File - Security Warning"

Seems to be related to the workstation, when the user logs on to an other the workstation, the Issue is not there.

Have read a lot of topics how to partly solve the Issue on relevant folders by t.ex:

C:\Users\Public\Desktop>ICACLS *.LNK /L /SETINTEGRITYLEVEL MED

which solve the Issue for actual shorcuts, but when users create a new shortcut, the Issue persists for this new shortcut.

I'll really like to find the Cause to this Issue, hope someone can guide me where to search.
0
Comment
Question by:olefisk
  • 3
  • 3
6 Comments
 
LVL 13

Expert Comment

by:Santosh Gupta
ID: 39988454
Hi,

Please try below...

Close internet explorer
Open up a cmd prompt
cd "\Program Files\Internet Explorer"
set SEE_MASK_NOZONECHECKS=1
iexplore

http://earthwithsun.com/questions/595211/removing-the-open-file-security-warning-in-windows-8
0
 

Author Comment

by:olefisk
ID: 39989814
Hi Santosh

Thanks for the reply.
Sorry doesn't seem to help (done it on both iexplore-64 and iexplore-32).

t.ex. when copying the link "Windows media player" from start-menu to desktop, and when clicking the desktop-shortcut the warning still comes up.

By the way, have You any Idea what can cause the changes to some workstations ?
0
 
LVL 13

Accepted Solution

by:
Santosh Gupta earned 500 total points
ID: 39989880
Hi,

Not sure why this happens. pls try below and revert.

http://www.ehow.com/how_5804009_disable-security-warning-windows-xp.html
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 

Author Comment

by:olefisk
ID: 39990072
Hi again Santosh.

Thank You, seems to solve the Issue.

Have investigated on the differences on users/workstations, which do or do not have the Issue.

A clue seems to be users/workstations, which have the Issue, can be users who have their "my documents" folder moved to a mapped network-share.
Does that seem reasonable ?
0
 
LVL 13

Assisted Solution

by:Santosh Gupta
Santosh Gupta earned 500 total points
ID: 39990251
Ohh is this the case. yes it may.

try this solution.
•Go to Control Panel -> Internet Options -> Security -> Local Intranet -> Sites -> Advanced
•Add the mapped drive or UNC path (\\machine or network loccation)
0
 

Author Comment

by:olefisk
ID: 40021291
Hi Santosh

Sorry for the late reply, have tested a lot, stopped by the Eastern hollidays, and tested further the last days.
Your last reply seems to solve the Issue for the users with Documents folder placed on a mapped network-share.
Had still a few users which havn't mapped their Documents-folder, but they are solved via changing the security-Policy.

So Issue seems to be solved, but still annoying that I don't know what causes the Issue.

Thank You very much for Your help
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Encryption for Business Encryption (https://en.wikipedia.org/wiki/Encryption) ensures the safety of our data when sending emails. In most cases, to read an encrypted email you must enter a secret key that will enable you to decrypt the email. T…
In 2017, ransomware will become so virulent and widespread that if you aren’t a victim yourself, you will know someone who is.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now