Windows 2003 server admin-shares, security access, NO_SD

[Guest]

When reporting our admin-shares the security access values are displayed as 'NO_SD'. The documentation describes this to mean �no-security-descriptor’.

Which of the below does this actually mean:

1. There isn’t a security descriptor associated with the share (thought every securable object had a security descriptor)?

2. There is a security descriptor but no DACL (which gives �unconditional access’ to everyone)?

3. There is a security descriptor with an empty DACL (which gives �no access’ to anyone)?

Thanks.

[kstanush]

Re: Windows 2003 server admin-shares, security access, NO_SD

The answer is #1, NO_SD means that there isn't a security descriptor (SD) on the object. I also checked and verified that there wasn't a DACL either.

Since this is an admin share, I verified that apparently admin shares don't have SDs or DACLs, which is probably the reason you can't see or change the security on admin shares.

Seeing NO_SD on an admin share is a little misleading, so I'll update Exporter Pro to print something like ADMIN_ONLY to make it more clear. Let me know if you need an immediate patch.

Thanks for reporting this.

[Guest]

Re: Windows 2003 server admin-shares, security access, NO_SD

Thanks for the answer. No hurry now that we understand.