question

AdrianC-7801 avatar image
0 Votes"
AdrianC-7801 asked DaisyZhou-MSFT commented

Special permission in AD

Hi,
I was implementing LAPS in the environment and noticed something very strange and maybe someone can put a light on this.

When assigning Read Password permissions trough the LAPS PowerShell command line, it puts a text with Special in the Access column (NTFS Advanced permissions) for the group or user. Everything works.
If I put the same permissions on the same attributes manually, it does not work and simply because I cannot make the permissions put the Special text in the Access column.

Can someone explain what that Special means, or how I can I get it manually?

Thanks



windows-server
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello AdrianC-7801,

I would like to know how things are going on your end? If you have any further questions or concerns about this case, please feel free to let us know.


Best Regards,
Daisy Zhou



============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·

Hello AdrianC-7801,

I have not heard back from you in a few days and wanted to check on the status of your problem. Please let me know the results of your troubleshooting. Your time is greatly appreciated.

Best Regards,
Daisy Zhou



============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

0 Votes 0 ·

1 Answer

DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered DaisyZhou-MSFT edited

Hello AdrianC-7801,

Thank you for posting here.

NTFS special permissions may contain one or more different permissions.

For example:
1.The "Users" group has "Special permissions", we can click this entry and click "View".

204468-screenshot-2022-05-23-144726jpg.png

2.Through "Show Advanced permissions", we can see "Special permissions".

204582-screenshot-2022-05-23-144815.png

3.Please click "Show Advanced permissions", then you will see "Show basic permissions", we can see "Create files /write data" and "Create folders /append data", here the two permissions ("Create files /write data" and "Create folders /append data") are "Special permissions".

204572-2.png

You can try to check the Special permission in your case and add the Special permission manually to see if it helps.


Hope the information is helpful. If anything is unclear, please feel free to let us know.



Best Regards,
Daisy Zhou


============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.