Using Exporter Pro, I ran a security scan for the shares on a W2K server. One share showed FULL_CONTROL for the Everyone group, which piqued my interest. When I examined the rights for that share using windows explorer on the server in question, I show the Everyone group has READ access at the share level. At the directory level, the Everyone group has read/execute/list permissions, but not write permissions.
My question is this: why does Exporter Pro list the permissions for this share as FULL_CONTROL for the Everyone group when Windows shows the permissions as READ? Is there a particular set of circumstances that can cause this sort of anomoly? My concern is that I rely on the output of Exporter Pro for auditing system configurations. If I can't trust the results to match up with the actual rights on a given server, this tool isn't going to be of much use to me. My assumption is that something I'm not thinking of is causing a problem. Just not sure what it might be. Any thoughts?
My question is this: why does Exporter Pro list the permissions for this share as FULL_CONTROL for the Everyone group when Windows shows the permissions as READ? Is there a particular set of circumstances that can cause this sort of anomoly? My concern is that I rely on the output of Exporter Pro for auditing system configurations. If I can't trust the results to match up with the actual rights on a given server, this tool isn't going to be of much use to me. My assumption is that something I'm not thinking of is causing a problem. Just not sure what it might be. Any thoughts?
Comment