Laptops Forum

Ask something
Question Locked

Gaining read, write, and execute privileges all at once?

0 helpful
9 replies

by lamentofking 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Ok. I got a Dell Inspiron 600m notebook running win xp pro sp2 with group policy settings that include restriction privileges to certain folders. Now this person comes over to check out my comp. He was able to get into the C:\temp folder. The prob is I had that folder restricted so that the user that I had logged on had no privileges there. He was able to get stuff in yet by just double-clicking on the folder my restriction settings still seem to be intact. Whatever he put in there he was able to execute (run). So does anybody know how this guy is able to get into folders like that? Is he using a method to gain read, write, and execute privileges all at once or what?

9 replies

by cmiller5400

I would use NTFS to secure the folder and not rely on group policy to correctly apply it.

by older mycroft

Reads in a very dodgy way ! ;)

We are presented with an unfortunate individual whose system security would appear to have been circumvented by some whizz kid.

However!

If you read between the lines it is actually a request for information as to how to bypass security restrictions on a system folder.

If it's not then I apologise, but I won't be the one to post the possible ways in which this security was beaten!

All I will say is that this computer breaks the first rule of security ~ NEVER place a direct-folder in the %root% of any hard drive. You deny the protection of security layers that way.

by older mycroft

'No Path Required'

Y'know - sitting in plain sight. The only thing you gotta remember is C:\.....

(Maybe I should patent it if it's new!)

You must have seen system warnings advising against placing items in the root.

by dumphrey

And yeah I know about system root folders, but other then hiding the folders some Im not sure what protection non-root folders provide. I avoid them based on asthetics, I just dislike a messy root file system.

by cg it

how did you restrict the temp folder with group policy? There are limited options for the local machine user rights assignments AND security options that have anything to do with folder/file security. Most of those deal with network access of shared resources such as folders and files contained in them.

Now most folders have authenticated user rights as read/modify/execute/ permissions so unless you removed that from the security of the folder, anyone who logs on to the laptop would be considered an authenticated user therefore have read/modify/execute permission.

by lamentofking

OK. He was able to get into the C:\Windows\temp folder not C:\temp. I can't believe I didnt catch that when I was typing. Now how is it that he is getting stuff into this folder and is able to execute? I tried simple just dragging stuff in but it still says access denied.

by cg it

folder has read/execute/traverse folder/execute permissions.

Usually there's nothing in the folder except files considered temporary files.

Usually you'll have a couple of .net framework files. netfxupdate and aspnet

so ... not sure what the problem would be.

This discussion is closed to new replies.