found it here:
http://support.microsoft.com/kb/308419
"Synchronize
The Synchronize permission allows or denies different threads to wait on the
handle for the file or folder and synchronize with another thread that may
signal it. This permission applies only to multiple-threaded,
multiple-process programs."
and agian, when you set the special perms I mentioned in my post via the
gui, this permission is also set, so I will do the same when using
icacls.exe.
"James" <noone[ at ]nowhere.com> wrote in message
news:%23Q2%23qgeaJHA.5420[ at ]TK2MSFTNGP04.phx.gbl...
[Quoted Text] > using icacls.exe to automated setting some NTFS permissions... I'm
> wondering and the 'synchronize' option listed because If I set the
> permission I'm after in the windows gui and then run icacls.exe to view
> how icacls displays it, it includes the 's'... which I assume has no gui
> representation.
>
> eg. running this:
>
> icacls.exe d: /grant users:(CI)(IO)(WD)
>
> grants the 'write data / add file' permission to 'subfolders only' on my
> d: drive, as expected... and if I run icacls.exe d: to view what I just
> did it is displayed the same way. BUT, if I use the windows GUI to make
> this same change and then run icacls.exe to view that change it is
> displayed like this:
>
> (CI)(IO)(S,WD)
>
> which includes the 's', or 'synchronize'? So I'm thinking if the GUI does
> it then I should also when using icacls.exe? yes/no? what is it?
|