Incorrectly ordered NTFS ACEs?

I got a question today about a strange permissions problem one of their users was having. Even more strange when the checked the permissions on the folder they got the following:

The permissions on Sub_Directory are incorrectly ordered, which may cause some entries to be ineffective.

Well what is this? Microsoft has a few articles about things like this.

But since this was a users homedirectory we decided just to reset all the permissions on the users folder.

Whats the woha about?

Microsoft changed some things with Windows 2000. One thing was that the OS wants the direct ACEs (Access Control Entries) before the inherited ACEs in the ACL (Access Control List). So some older tools might sometimes get things wrong and you will get that warning.

 

Leave a Reply