Puppet Version: 5.5.14, 5.5.10 Puppet Server Version: 5.3.8 OS Name/Version: Windows 10 / 1809 File modes are applied on every puppet run at least if files reside in special folders like "Program Files" and "Windows". This was working in 5.5.1 Reproducible: Always, see example below Desired Behavior: File modes are not changed Actual Behavior: File modes are changed with every run (mode changed '2000644' to '0644') Example C:\Users\administrator>cacls C:\Windows\system32\puppet_facter_pci.ids.gz C:\Windows\system32\puppet_facter_pci.ids.gz APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(OI)(CI)(special access READ_CONTROL FILE_READ_DATA FILE_READ_EA FILE_WRITE_EA APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(CI)(IO)(special access GENERIC_READ BUILTIN\Administrators:(special access STANDARD_RIGHTS_ALL DELETE READ_CONTROL WRITE_DAC WRITE_OWNER SYNCHRONIZE STANDARD_RIGHTS_REQUIRED FILE_GENERIC_READ FILE_GENERIC_WRITE FILE_READ_DATA FILE_WRITE_DATA FILE_APPEND_DATA FILE_READ_EA FILE_WRITE_EA FILE_READ_ATTRIBUTES FILE_WRITE_ATTRIBUTES MBOX\Domain Admins:(special access READ_CONTROL SYNCHRONIZE FILE_GENERIC_READ FILE_READ_DATA FILE_READ_EA FILE_READ_ATTRIBUTES Everyone:(special access READ_CONTROL SYNCHRONIZE FILE_GENERIC_READ FILE_READ_DATA FILE_READ_EA FILE_READ_ATTRIBUTES NT AUTHORITY\SYSTEM:F C:\Users\administrator>puppet apply -e "file { 'C:\Windows\system32\puppet_facter_pci.ids.gz': mode => '0644'}" Notice: Compiled catalog for w-s3-14.int.m-box.de in environment production in 0.02 seconds Notice: /Stage[main]/Main/File[C:\Windows\system32\puppet_facter_pci.ids.gz]/mode: mode changed '2000644' to '0644' Notice: Applied catalog in 0.77 secondsC:\Users\administrator>cacls C:\Windows\system32\puppet_facter_pci.ids.gz C:\Windows\system32\puppet_facter_pci.ids.gz APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(OI)(CI)(special access {{ READ_CONTROL}} {{ FILE_READ_DATA}} {{ FILE_READ_EA}} {{ FILE_WRITE_EA}}APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(CI)(IO)(special access {{ GENERIC_READ}}BUILTIN\Administrators:(special access {{ STANDARD_RIGHTS_ALL}} {{ DELETE}} {{ READ_CONTROL}} {{ WRITE_DAC}} {{ WRITE_OWNER}} {{ SYNCHRONIZE}} {{ STANDARD_RIGHTS_REQUIRED}} {{ FILE_GENERIC_READ}} {{ FILE_GENERIC_WRITE}} {{ FILE_READ_DATA}} {{ FILE_WRITE_DATA}} {{ FILE_APPEND_DATA}} {{ FILE_READ_EA}} {{ FILE_WRITE_EA}} {{ FILE_READ_ATTRIBUTES}} {{ FILE_WRITE_ATTRIBUTES}}MBOX\Domain Admins:(special access {{ READ_CONTROL}} {{ SYNCHRONIZE}} {{ FILE_GENERIC_READ}} {{ FILE_READ_DATA}} {{ FILE_READ_EA}} {{ FILE_READ_ATTRIBUTES}}Everyone:(special access {{ READ_CONTROL}} {{ SYNCHRONIZE}} {{ FILE_GENERIC_READ}} {{ FILE_READ_DATA}} {{ FILE_READ_EA}} {{ FILE_READ_ATTRIBUTES}}NT AUTHORITY\SYSTEM:F C:\Users\administrator>puppet apply -e "file { 'C:\Windows\system32\puppet_facter_pci.ids.gz': mode => '0644'}" Notice: Compiled catalog for w-s3-14.int.m-box.de in environment production in 0.02 seconds Notice: /Stage[main]/Main/File[C:\Windows\system32\puppet_facter_pci.ids.gz]/mode: mode changed '2000644' to '0644' Notice: Applied catalog in 0.75 seconds |