Hello;
We are in the process of migrating our Novell applications and data to a windows 2000 servers (SP2). The Windows 2000 servers are part of a NT 4 domain structure. Our data migration is being performed manually. We have developed BAT and CMDscripts to create the identical directory structure for applications and user data on all remote servers, We use XCACLS in the script to secure the structures.
We have run into an interesting problem. when we set file permissions to our program exe directories to read and execute on windows 2000, we see numerous violations in our audit event log, event id 560. Information obtained from the event log indicates that attributes of the file (exe) are being updated when the application is executed. If I grant the advance file permission of Write Attributes in addition to Read and execute the audit failures disappear.
Questions: Is it a requirement that you must give The Write attribute permission when you grant Read and exec access.Is it possible to use XCACLS to assign the write attribute permission? Can you deactivate the updating of attribute information when accessing a file for read and exec access.
Thanks
John