Click here to get back home

the file owner that created by a service

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
the file owner that created by a service Pan Tao 09-06-2007
Posted by Pan Tao on September 6, 2007, 10:01 am
Please log in for more thread options
hello,all
I run a apache server one window 2003 as a service with user
localsystem. Andit seemed that the file owner create by the
service sometimes is administrators ,sometime the file owner
is the owner of that directory. I just would like to know if
a service run as localsystem,than what the file owner is
Since localsystem is a special user.
I hope I run the service, and have some user directories
belong to different user, and if a file is created by the service ,
the file owner equals to the file's parent directoy.

many thanks,

PanTao




Posted by Mathieu CHATEAU on September 6, 2007, 11:22 am
Please log in for more thread options
Hello,

it's not a workaround, but you would rather run apache with a standard
windows user, so it protect the system from flaw in apache.

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Pan Tao" <ban dian xing_hotmail_com> wrote in message
> hello,all
> I run a apache server one window 2003 as a service with user
> localsystem. Andit seemed that the file owner create by the
> service sometimes is administrators ,sometime the file owner
> is the owner of that directory. I just would like to know if
> a service run as localsystem,than what the file owner is
> Since localsystem is a special user.
> I hope I run the service, and have some user directories
> belong to different user, and if a file is created by the service ,
> the file owner equals to the file's parent directoy.
>
> many thanks,
>
> PanTao
>
>
>


Posted by Roger Abell [MVP] on September 6, 2007, 10:37 pm
Please log in for more thread options
In addition to the well place warning about not using the
localsystem context . . .
A file is owned by the account context of the process that
creates the file. If a service running as local system creates
the file, if it is impersonating another account context at the
time (in the thread) the file will be owned by the account of
the creating context. If the localsystem context creates it in
its own context, and Windows is at the defaults of making
Administrators owner of objects created by members of the
Administrators group, then Administrators will be owner as
localsystem is a (hidden) member of Administrators.

Roger

"Pan Tao" <ban dian xing_hotmail_com> wrote in message
> hello,all
> I run a apache server one window 2003 as a service with user
> localsystem. Andit seemed that the file owner create by the
> service sometimes is administrators ,sometime the file owner
> is the owner of that directory. I just would like to know if
> a service run as localsystem,than what the file owner is
> Since localsystem is a special user.
> I hope I run the service, and have some user directories
> belong to different user, and if a file is created by the service ,
> the file owner equals to the file's parent directoy.
>
> many thanks,
>
> PanTao
>
>
>



Similar ThreadsPosted
change file owner? April 4, 2006, 10:48 pm
Minimum File System Access Needed for a Service? December 6, 2005, 3:14 am
W2K3 Server File Deletion From Windows Service August 11, 2006, 4:20 pm
Windows Service runs batch file requiring user responses on WS2003 August 12, 2005, 9:40 pm
unexpected directories created July 9, 2008, 10:42 pm
Enable the created certificate Template June 18, 2007, 11:55 am
Default NTFS permissions too liberal on newly created volumes January 22, 2006, 9:58 pm
Are there any GROUPs created automatically by installing Cert Server in Win2003? November 14, 2006, 11:34 am
Using CREATOR OWNER February 5, 2007, 2:38 am
AzMan: Has anyone created an HTML/Web management console as an alternative to the AzMan MMC? January 4, 2006, 3:18 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap