Special permission in AD

AdrianC 1 Reputation point
2022-05-05T17:15:50.627+00:00

Hi,
I was implementing LAPS in the environment and noticed something very strange and maybe someone can put a light on this.

When assigning Read Password permissions trough the LAPS PowerShell command line, it puts a text with Special in the Access column (NTFS Advanced permissions) for the group or user. Everything works.
If I put the same permissions on the same attributes manually, it does not work and simply because I cannot make the permissions put the Special text in the Access column.

Can someone explain what that Special means, or how I can I get it manually?

Thanks

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,619 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Daisy Zhou 21,201 Reputation points Microsoft Vendor
    2022-05-23T06:57:08.607+00:00

    Hello AdrianC-7801,

    Thank you for posting here.

    NTFS special permissions may contain one or more different permissions.

    For example:
    1.The "Users" group has "Special permissions", we can click this entry and click "View".

    204468-screenshot-2022-05-23-144726jpg.png

    2.Through "Show Advanced permissions", we can see "Special permissions".

    204582-screenshot-2022-05-23-144815.png

    3.Please click "Show Advanced permissions", then you will see "Show basic permissions", we can see "Create files /write data" and "Create folders /append data", here the two permissions ("Create files /write data" and "Create folders /append data") are "Special permissions".

    204572-2.png

    You can try to check the Special permission in your case and add the Special permission manually to see if it helps.

    Hope the information is helpful. If anything is unclear, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments