Windows Live Sync Seems to Override Container Inheritance
Duffy
(obviously) but files go into folders with permissions for multiple users and
OI and CI set. All users have Senior Editor permissions in Sync. Files
placed in the shared folders on the SBS 2003 machine do not have inherited
permissions, only those of the user running Sync. So nobody else can get to
the files. Any way to fix that? Inheritance worked fine with FolderShare.
Khandelwal [MSFT]@discussions.microsoft.com Vaibhav Khandelwal [MSFT]
Could you send me an email (v...@live.com) with the log files from your
machine? I can take a look to see why the files do not inherit the security
attributes from the parent folder.
The logs should be located at C:\Documents and Settings\<user>\Local
Settings\Application Data\Microsoft\Windows Live Sync\logs
Thanks,
Vaibhav Khandelwal [MSFT]
Vaibhav Khandelwal [MSFT]
Do you have a FAT32 partition instead of NTFS?
-Vaibhav.
Duffy
Duffy
Duffy
properly? Is there a workaround other than reverting to FAT32?
Duffy
Duffy
essentially making Sync extremely difficult to use in any kind of server or
multi-user environment.
Vaibhav Khandelwal [MSFT]
is for NTFS security. So you don't need to revert to FAT32.
Sorry if this caused any confusion.
Vaibhav Khandelwal [MSFT]
Sorry for the delay in replying - the weather's been crazy here the past few
days.
As regarding the Security Attributes (SA) inheritance:
Every new file is initially downloaded to a temporary directory and once the
download completes is then moved to the actual library path.
In FolderShare, this temporary directory was common to all users and did not
have proper SA control. Thus different users could potentially access each
other's temp files. Also note that while moving a file from the temp
directory to the actual location, the file did not inherit the SA of the
destination folder, but instead carried over the SA of the temp directory.
This worked in your case, but was definitely not a secure solution.
With WL Sync, we have made 2 security fixes:
1. We have replaced the global temporary directory with a unique one for
each user. Also this per user temp directory has SA only for that user
2. Moving a file from the temp directory to the library location now
inherits the SA of the destination.
It is the second point here which is for some reason not working in your case.
I have looked at the logs you sent me but have not been able to find the
exact issue as yet. I think the 'Users Shared folders' on SBS which I'm
assuming is mapped to a network drive? is causing the files to not inherit SA
from the parent folder.
I will continue to investigate this further - In the meanwhile, I'm emailing
you a temporary work around that just might solve this issue for now.
Thanks,
Vaibhav.
Duffy
Duffy
darren schwartz
Thanks
Darren
> On Monday, December 15, 2008 8:24 PM Duff wrote:
> Shared folders with Sync running on SBS 2003. Sync runs under one user
> (obviously) but files go into folders with permissions for multiple users and
> OI and CI set. All users have Senior Editor permissions in Sync. Files
> placed in the shared folders on the SBS 2003 machine do not have inherited
> permissions, only those of the user running Sync. So nobody else can get to
> the files. Any way to fix that? Inheritance worked fine with FolderShare.
>> On Tuesday, December 16, 2008 12:55 PM Vaibhav Khandelwal [MSFT wrote:
>> Hi Duffy,
>>
>> Could you send me an email (v...@live.com) with the log files from your
>> machine? I can take a look to see why the files do not inherit the security
>> attributes from the parent folder.
>>
>> The logs should be located at C:\Documents and Settings\<user>\Local
>> Settings\Application Data\Microsoft\Windows Live Sync\logs
>>
>> Thanks,
>> Vaibhav Khandelwal [MSFT]
>>
>> "Duffy" wrote:
>>> On Wednesday, December 17, 2008 2:14 PM VaibhavKhandelwalMSF wrote:
>>> Hi Duffy,
>>>
>>> Do you have a FAT32 partition instead of NTFS?
>>>
>>> -Vaibhav.
>>>
>>> "Duffy" wrote:
>>>> On Thursday, December 18, 2008 11:26 AM Duff wrote:
>>>> No, all of the machines are 100% NTFS.
>>>>
>>>> Duffy
>>>>
>>>> "Vaibhav Khandelwal [MSFT]" wrote:
>>>>> On Friday, December 19, 2008 8:55 AM Duff wrote:
>>>>> Does this suggestion imply that Live Sync does not handle NTFS permissions
>>>>> properly? Is there a workaround other than reverting to FAT32?
>>>>>
>>>>> Duffy
>>>>>
>>>>> "Vaibhav Khandelwal [MSFT]" wrote:
>>>>>> On Saturday, December 20, 2008 10:11 AM Duff wrote:
>>>>>> Any thoughts on causes or solutions? This is a significant issue,
>>>>>> essentially making Sync extremely difficult to use in any kind of server or
>>>>>> multi-user environment.
>>>>>>
>>>>>> "Duffy" wrote:
>>>>>>> On Sunday, December 21, 2008 3:55 PM VaibhavKhandelwalMSF wrote:
>>>>>>> Live Sync does handle NTFS permissions using FOF_NOCOPYSECURITYATTRIBS which
>>>>>>> is for NTFS security. So you do not need to revert to FAT32.
>>>>>>> Sorry if this caused any confusion.
>>>>>>>
>>>>>>> "Duffy" wrote:
>>>>>>>>> On Sunday, December 21, 2008 6:52 PM Duff wrote:
>>>>>>>>> The fix as emailed is an excellent solution for me. Thanks.
>>>>>>>>>
>>>>>>>>> "Vaibhav Khandelwal [MSFT]" wrote:
>>>>>>>>>> On Sunday, December 21, 2008 6:53 PM Duff wrote:
>>>>>>>>>> I understand. And thanks for the fix.
>>>>>>>>>>
>>>>>>>>>> "Vaibhav Khandelwal [MSFT]" wrote:
>>>>>>>>>> Submitted via EggHeadCafe - Software Developer Portal of Choice
>>>>>>>>>> A Comparison of Managed Compression Algorithms
>>>>>>>>>> http://www.eggheadcafe.com/tutorials/aspnet/71485ecc-2d2d-435a-9c35-3d12b279f9ae/a-comparison-of-managed-compression-algorithms.aspx
StephenB
http://windowslivehelp.com/product.aspx?productid=24
-steve
darren schwartz <darrens...@hotmail.com> wrote:
--
Stephen Boots
MVP Windows Live
Windows Live OneCare/Live Mesh/MSE Forums Moderator
sbo...@mvps.org