Microsoft KB Archive/216401

= Data Mining Possible Using Subtree Search for AdsPath and SYS_RDN Only =

Article ID: 216401

Article Last Modified on 8/27/2002

-

APPLIES TO


 * Microsoft Site Server 3.0 Standard Edition

-



This article was previously published under Q216401



SYMPTOMS
When you perform a subtree search and only search for adsPath and SYS_RDN, the security check for inherited ACEs may be performed after returning the first match. The first row makes it by the security check, despite the lack of permissions.



RESOLUTION
To resolve this problem, apply the latest Site Server 3.0 service pack.



WORKAROUND
To work around this problem, set an absolute (physical) ACL on each and every object itself.



STATUS
Microsoft has confirmed this to be a problem in Site Server version 3.0. This problem has been corrected in the latest U.S. service pack for Site Server version 3.0. For information on obtaining the service pack, query on the following word in the Microsoft Knowledge Base (without the spaces):

S E R V P A C K

Keywords: kbbug kbfix kbsiteserver300sp2fix KB216401

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.