What is Special Permissions?

I was checking the security rights for the folder C:\Windows\System32\Tasks and find that Authenticated Users group has Special Permissions (notice that it has no Write permissions):

I went into Advanced tab and the basic view is (notice that it has no Read permissions):

But when I clicked "Show advance permissions", it shows an additional "Read permissions":

Why does it say different things for the same folder in the three views? What is the actual access that the group Authenticated Users have on this folder?

1

2 Answers

Lets try two more ways to show the permissions:

icacls.exe:

 NT AUTHORITY\Authenticated Users:(CI)(W,Rc)

Get-Acl:

 NT AUTHORITY\Authenticated Users Allow Write, ReadPermissions, Synchronize

Your second and third screenshot actually show very similar permissions, the third one being the most precise.

I think the Write permissions should also be shown in the first screenshot, this may be a bug, but permissions can be complicated.

About Read:

on the first two screenshops Read means being able to read the contents of the file/folder, on the third screenshot they list advanced permissions, Read permissions means being able to read the NTFS permissions of the object, not the content itself. These are two different things.

1

Found some useful documents:(v=ws.10)?redirectedfrom=MSDN

Your Answer

Sign up or log in

Sign up using Google Sign up using Facebook Sign up using Email and Password Submit

Post as a guest

Post Your Answer Discard

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy