TotalCommander 6.53- copy NTFS permissions

English support forum

Moderators: white, Hacker, petermad, Stefan2

Post Reply
karnin
Junior Member
Junior Member
Posts: 73
Joined: 2005-02-28, 08:57 UTC

TotalCommander 6.53- copy NTFS permissions

Post by *karnin »

F5 copy option provides an additional switch on NTFS file systems:
'Copy NTFS permissions (may need administrator rights)'

Is it similar to ROBOCOPY.EXE which is included in 'Windows Resource Kit Tools WinXP/2003', free MS download....
http://www.microsoft.com/downloads/details.aspx?familyid=9d467a69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en

ROBOCOPY.EXE copies directories or whole NTFS discs in backup mode too, all NTFS infos/options/rights are included:
D=Data,
A=Attributes,
T=Timestamps,
S=Security=NTFS ACLs,
O=Owner info,
U=aUditing info.

Does TC 6.53 also copy whole NTFS rights listed above??

ROBOCOPY.EXE is a command line tool, TC would be much more sophisticated TC ;-)
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48088
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

The first 3 rights (D, A, T) are copied even if you don't check this checkbox. When you check "NTFS permissions", TC copies Owner, Group and Permissions (ACLs) using the functions GetFileSecurity and SetFileSecurity with parameters
OWNER_SECURITY_INFORMATION,
GROUP_SECURITY_INFORMATION,
DACL_SECURITY_INFORMATION

There is no parameter for auditing info, though, so it isn't currently copied.
Author of Total Commander
https://www.ghisler.com
karnin
Junior Member
Junior Member
Posts: 73
Joined: 2005-02-28, 08:57 UTC

Post by *karnin »

ghisler(Author) wrote:There is no parameter for auditing info, though, so it isn't currently copied.
What is the content and/or meaning of 'auditing info', which is NOT copied by TC? Is it needed while restoring a Windows NTFS system :?: ?
Something about 'System access control list' ?
http://www.pcnineoneone.com/howto/filesystems4.html
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48088
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

Auditing is a log of who has accessed or modified a file at which time, if I understand this correctly. Sorry, I don't know what system ACLs are - anyone else?
Author of Total Commander
https://www.ghisler.com
User avatar
Lefteous
Power Member
Power Member
Posts: 9535
Joined: 2003-02-09, 01:18 UTC
Location: Germany
Contact:

Post by *Lefteous »

2ghisler(Author)
I don't know what system ACLs are - anyone else?
ACLS are access control lists.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secauthz/security/acl.asp
User avatar
ghisler(Author)
Site Admin
Site Admin
Posts: 48088
Joined: 2003-02-04, 09:46 UTC
Location: Switzerland
Contact:

Post by *ghisler(Author) »

2Lefteous
I know what access control lists are! The problem was that there are DACLs (file access control) and the so far unknown system ACLs. I made some research on MSDN, and found this:
system access control list
(SACL) An ACL that controls the generation of audit messages for attempts to access a securable object. The ability to get or set an object's SACL is controlled by a privilege typically held only by system administrators.
So apparently these SACLs are really responsible for audit messages. I didn't try to copy them so far because they failed if not admin. I will try to copy them when the user is logged in as admin in version 7.
Author of Total Commander
https://www.ghisler.com
User avatar
Lefteous
Power Member
Power Member
Posts: 9535
Joined: 2003-02-09, 01:18 UTC
Location: Germany
Contact:

Post by *Lefteous »

2ghisler(Author)
I know what access control lists are!
Sorry I must have overlooked the word "system". :oops:
karnin
Junior Member
Junior Member
Posts: 73
Joined: 2005-02-28, 08:57 UTC

Post by *karnin »

ghisler(Author) wrote:So apparently these SACLs are really responsible for audit messages. I didn't try to copy them so far because they failed if not admin. I will try to copy them when the user is logged in as admin in version 7.
Thanks a lot, let me know if needing a beta tester..... :D
User avatar
Tahattmeruh
Senior Member
Senior Member
Posts: 232
Joined: 2003-05-16, 13:35 UTC

Post by *Tahattmeruh »

I'm willing to beta test this also.
Post Reply