Unexpected Permissions After Moving Files Within a Partition with the New ACL Editor Installed (221472)

MORE INFORMATION

Prior to the new ACL Editor, permissions were retained for files that were moved within the same partition. When files are moved within the same partition, the entries in the Master File Table are simply modified; therefore, the ACL does not have to be re-created.

With the new ACL Editor, you need to take into account the inheritance bit.

When files are moved within the same partition and the inherited permissions of the new parent do not conflict with the old parent, there is no problem. The problem occurs when there is a conflict between the permissions being inherited from the new parent and the old parent.

For example:

   C:
     \Dir1
     \Dir2
          \SubDir
				

Permissions are as follows:

   Dir1 : Admins=FC; Users=Change; Power Users=Change
   Dir2 : Admins=FC; Users=Read
   SubDir : Inherit=On; (Admins=FC; Users=Read) inherited from parent
   ('Inherit=On' means that the inheritance check box is selected.)
				

If SubDir is moved to Dir1, the permissions are as follows in ACL Editor for SubDir:

   Inherit=Off; Administrators=Full; Users=Read 

Both Users and Administrators are unavailable, as if they are set to still inherit permissions, the permissions are also not editable. If you reset the permissions (make a change) on the parent, the child's permissions will be available and can be edited.

Expected behavior should be:

• Move will not change the security; that is, SubDir will continue to have the inherited information from Dir2.
• Making change to Dir1 permissions should make SubDir protected (inherit=off) and all the permissions should become explicit but remain the same as they were before the move.

For additional information about the new ACL Editor, please see the following article in the Microsoft Knowledge Base: For additional information about how to get Security Configuration Manager, please see the following article in the Microsoft Knowledge Base: