What is Special Permissions?

1

I was checking the security rights for the folder C:\Windows\System32\Tasks and find that Authenticated Users group has Special Permissions (notice that it has no Write permissions):

enter image description here

I went into Advanced tab and the basic view is (notice that it has no Read permissions):

enter image description here

But when I clicked "Show advance permissions", it shows an additional "Read permissions":

enter image description here

Why does it say different things for the same folder in the three views? What is the actual access that the group Authenticated Users have on this folder?

Old Geezer

Posted 2019-03-06T02:38:23.593

Reputation: 613

What do you mean by “different things”? “Read permissions” is not “Permission to read” but instead the ability to read the ACL. – Daniel B – 2019-03-08T09:21:57.373

Answers

0

Lets try two more ways to show the permissions:

icacls.exe:

 NT AUTHORITY\Authenticated Users:(CI)(W,Rc)

Get-Acl:

 NT AUTHORITY\Authenticated Users Allow  Write, ReadPermissions, Synchronize

Your second and third screenshot actually show very similar permissions, the third one being the most precise.

I think the Write permissions should also be shown in the first screenshot, this may be a bug, but permissions can be complicated.

About Read:

on the first two screenshops Read means being able to read the contents of the file/folder, on the third screenshot they list advanced permissions, Read permissions means being able to read the NTFS permissions of the object, not the content itself. These are two different things.

Peter Hahndorf

Posted 2019-03-06T02:38:23.593

Reputation: 10 677