Microsoft KB Archive/842604

= Permissions are not correctly inherited in a DFS topology on Windows 2000 Server and Windows Server 2003 =

Article ID: 842604

Article Last Modified on 2/5/2007

-

APPLIES TO


 * Microsoft Windows Server 2003, Standard Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
 * Microsoft Windows Server 2003, Enterprise x64 Edition
 * Microsoft Windows Server 2003, Web Edition
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Server

-





SYMPTOMS
When you use Windows Explorer to modify the folder permissions on a Distributed File System (DFS) topology, the permissions may be inherited from the DFS structure instead of from the target NTFS file system folder. For example, when you access the \\ \ structure directly, and you modify the folder permissions under that DFS root, the permissions may not be applied as you expect.



CAUSE
This behavior occurs because of the way that Windows Explorer applies inheritance for security descriptors on a DFS link.



RESOLUTION
To resolve this behavior, use the path of the physical folder to set permissions. For example, use the following path:

\\ \

In this path,  is a placeholder for the name of the server, and   is a placeholder for the name of the target share in the DFS structure.

Important Do not use the DFS path to set permissions on a folder. When you use the DFS path to set permissions on a folder, the folder may inherit permissions from the parent folder in the DFS topology.

