Click here to get back home

ACL with group name starting with a #

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
ACL with group name starting with a # Michel Lapointe 06-16-2005
Posted by Michel Lapointe on June 16, 2005, 9:57 am
Please log in for more thread options
Hello,

I would like to know why does the Folder ACL windows append a \ in front
of a group name starting with a #.

I know that a # as the first character in an LDAP query is against the
syntax, but the previous admin have create the group with this character
anyway.

Therefore my problem is why when I use a group like #groupname in file
security throught the normal File Security Interface, Windows append a \ in
front of the name.

Repro step:
1. Create a group in AD with a # as the first character
2. Create a new folder and assign Full access to this new group. The
name will display properly
3. Close the ACL windows
4. Wait a couple of minutes
5. Reopen the ACL windows. The name will be displayed with a \ appended
to the name like \#groupname

If anyone know why, or know a way to avoid it (it seem to be purely
esthetical) without removing the #, it will be appreciated

Thank

ML




Posted by Jerold Schulman on June 16, 2005, 1:35 pm
Please log in for more thread options

My guess is that the \ is an escape character, to cause # to be treated as a
literal #.



>Hello,
>
> I would like to know why does the Folder ACL windows append a \ in front
>of a group name starting with a #.
>
> I know that a # as the first character in an LDAP query is against the
>syntax, but the previous admin have create the group with this character
>anyway.
>
> Therefore my problem is why when I use a group like #groupname in file
>security throught the normal File Security Interface, Windows append a \ in
>front of the name.
>
> Repro step:
> 1. Create a group in AD with a # as the first character
> 2. Create a new folder and assign Full access to this new group. The
>name will display properly
> 3. Close the ACL windows
> 4. Wait a couple of minutes
> 5. Reopen the ACL windows. The name will be displayed with a \ appended
>to the name like \#groupname
>
> If anyone know why, or know a way to avoid it (it seem to be purely
>esthetical) without removing the #, it will be appreciated
>
>Thank
>
>ML
>



Posted by Joe Richards [MVP] on June 16, 2005, 8:29 pm
Please log in for more thread options
I would say it is a bug in the file system ACL editor GUI dialog. It doesn't
occur in the AD ACL Editor GUI dialog and doesn't occur when enumerating the
permissions from the command prompt.

joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net


Michel Lapointe wrote:
> Hello,
>
> I would like to know why does the Folder ACL windows append a \ in front
> of a group name starting with a #.
>
> I know that a # as the first character in an LDAP query is against the
> syntax, but the previous admin have create the group with this character
> anyway.
>
> Therefore my problem is why when I use a group like #groupname in file
> security throught the normal File Security Interface, Windows append a \ in
> front of the name.
>
> Repro step:
> 1. Create a group in AD with a # as the first character
> 2. Create a new folder and assign Full access to this new group. The
> name will display properly
> 3. Close the ACL windows
> 4. Wait a couple of minutes
> 5. Reopen the ACL windows. The name will be displayed with a \ appended
> to the name like \#groupname
>
> If anyone know why, or know a way to avoid it (it seem to be purely
> esthetical) without removing the #, it will be appreciated
>
> Thank
>
> ML
>
>


Posted by Michel Lapointe on June 17, 2005, 10:47 am
Please log in for more thread options
That's my guess also...

It seem that the ACL GUI insert the \ to treat the # as an escape character
for some processing but doesn't clean the string before display...

Thank to both of you to confirm my guess...

ML
>I would say it is a bug in the file system ACL editor GUI dialog. It
>doesn't occur in the AD ACL Editor GUI dialog and doesn't occur when
>enumerating the permissions from the command prompt.
>
> joe
>
> --
> Joe Richards Microsoft MVP Windows Server Directory Services
> www.joeware.net
>
>
> Michel Lapointe wrote:
>> Hello,
>>
>> I would like to know why does the Folder ACL windows append a \ in
>> front of a group name starting with a #.
>>
>> I know that a # as the first character in an LDAP query is against
>> the syntax, but the previous admin have create the group with this
>> character anyway.
>>
>> Therefore my problem is why when I use a group like #groupname in
>> file security throught the normal File Security Interface, Windows append
>> a \ in front of the name.
>>
>> Repro step:
>> 1. Create a group in AD with a # as the first character
>> 2. Create a new folder and assign Full access to this new group. The
>> name will display properly
>> 3. Close the ACL windows
>> 4. Wait a couple of minutes
>> 5. Reopen the ACL windows. The name will be displayed with a \
>> appended to the name like \#groupname
>>
>> If anyone know why, or know a way to avoid it (it seem to be purely
>> esthetical) without removing the #, it will be appreciated
>>
>> Thank
>>
>> ML




Similar ThreadsPosted
Certificate Services not Starting. August 31, 2006, 5:16 am
The Kerberos Key Distribution Center service hung on starting. ID 7022. December 13, 2007, 10:49 am
local group / global group permissions problem August 18, 2005, 12:42 pm
Can I delete 'Athenticated Users' group form local 'Users' group January 29, 2008, 11:52 am
Group Policy???? June 26, 2005, 11:39 am
Group Policy April 25, 2006, 11:58 pm
Group Policies September 13, 2006, 8:31 am
Group Policy May 7, 2007, 3:57 pm
Builtin Group Missing October 11, 2005, 3:11 pm
Set MaximumDynamicBacklog via Group Policy? October 26, 2005, 11:12 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap