Set to default: Copy NTFS Permissions

[ig88]

My use case:
I have sensitive, eyes-only files/directories in let's say, t:\supersecret. Files must retain their restricted group ownership even if they get accidentely copied to a t:\public1. By default, windows file explorer will make files inherit permissions once copied to a less secure destination.

I want this to be the default in case I have a user who has access to both areas and forgets to click the box.

Frontend: Windows 10 clients
The backend: Linux servers (redhat 7) hosting samba
Note that the linux group ownership of public1 (relates to t:\public1 samba share) is set to nobody.
So, the beginning looks like this:
drwxrwx--- root nobody 1234 5678 filename.txt

Windows 10 clients see a T: drive. Not sure if relevant, but individual directories on T: are separate samba shares but we use msdfs to make it appear on the same drive.

In TC, I've played with XPMoveMethod=0 and SamePartitions=T but each time I do a test copy, the "Copy NTFS Permissions" is not selected. On a whim, I tried it anyway without selecting the box and the file inherits permissions.

Please let me know if this is going to be fixed or am I missing something on how to make it the default? I've seen some chatter in the forum about "Copy NTFS permissions" but I couldn't find anything that sets this checkbox by default.

In my use case, I would rather have it checked by default (and deal with any permissions issues) than expose sensitive data when somebody forgot to check the box.

Thanks all.

[ig88]

Looking at my above comment about nobody, filename.txt was incorrect.
It should have read:
drwxrwx--- root nobody 1234 5678 public1

[MVV]

Would it help too much if TC provide such option if one can copy a file via Explorer and lost its permissions?

[ig88]

The reference to file manager was to illustrate the problem. I’m evaluating TC to potentially replace it via non technical policy.

[Dalai]

Unfortunately it wasn't stated in the OP if the "Copy NTFS permissions" option worked in the test case. AFAIK file/directory permissions on a Samba share are either inherited from the parent directory (with (POSIX) ACLs when set accordingly), the settings of that share (create mask, directory mask along with some others), or the umask. This means that the permissions are inherited from somewhere, not copied with the file.

I don't know if it's possible to do what you want to achieve. Also keep in mind that only a file's owner and root are allowed to set permissions and timestamps on that file (on Linux by default).

Regards
Dalai

[ig88]

Forgot to mention, but yes, manually ticking "Copy NTFS Permissions" worked flawlessly. I just want to see if I can make that the default setting (that box is pre-selected) in TC.

[ig88]

Regarding ability to select Copy NTFS permissions by default: Does it exist?

If it does not, is it on the radar to get added?

I'm certainly willing to discuss paying for the addition of that ability.

[Horst.Epp]

Currently there is no Ini-File option to make "Copy NTFS permissions" the default.
Wait for an answer from Christian.