Resolving file permission conflicts

Applies To: Windows Server 2003 R2

UNIX uses three levels of file permission settings: user permissions, group permissions, and permissions for everyone else. Additionally, root has full permissions to all files, regardless of the file settings.

In Windows, the administrator can access all files, but cannot modify the files without first modifying the permissions. Consequentially, automated activities such as virus checking can change the UNIX permissions and potentially cause problems for UNIX clients.

To resolve this problem, you must modify the KeepInheritance registry value, add the Windows group to the share, and configure Access Control Entries (ACEs) to apply to newly created directories.

To modify the KeepInheritance registry value

1. Open the Registry Editor: click Start, and then click Run. Then, enter regedit and click OK.

2. Set the following registry key to 1:

   HKLM\Software\Microsoft\Server for NFS\CurrentVersion\Mapping\KeepInheritance

   Note

   Setting this registry key can affect how permissions appear in UNIX.

To configure ACEs to apply to newly created directories

1. Open Windows Explorer: click Start, point to Programs or All Programs, point to Accessories, and then click Windows Explorer.

2. Right-click a folder and select Properties.

3. Click the Security tab.

4. Click Advanced.

5. Select the Allow inheritable permissions check box.

6. Click OK.