Which NTFS permissions allow users to run applications?

Modify (yes)
Read and Execute (yes)
Full Control (yes)
Write (No)

It appears that WRITE alone would not allow a user to run applications. Can
anyone cite resource to support (or disprove) this and why? Thanks!

chaosUnplugged wrote:
> Which NTFS permissions allow users to run applications?
>
> Modify (yes)
> Read and Execute (yes)
> Full Control (yes)
> Write (No)
>
> It appears that WRITE alone would not allow a user to run
> applications. Can anyone cite resource to support (or disprove) this
> and why? Thanks!

Read and Execute is usually all that is needed.
Anything else may be on a few files for the application - but not the
executable itself.

(Why would you think "WRITE" would allow anyone to EXECUTE an application?)

http://www.experts-exchange.com/Secu..._21586050.html

HOW TO: Set, View, Change, or Remove File and
Folder Permissions
http://support.microsoft.com/kb/308418

HOW TO: Set the My Documents Folder as Private in Windows XP
http://support.microsoft.com/kb/298399

HOW TO: Set, View, Change, or Remove Special Permissions
for Files and Folders
http://support.microsoft.com/kb/308419

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html

> (Why would you think "WRITE" would allow anyone to EXECUTE an application?)

I don't. I was challenged by another MCP who stated that "All four choices
(above) allow the running of applications. The only permission that doesn't
is READ, which is not one of the choices." He even went on to cite a support
reference for his opinion (Windows XP Help: Setting Permissions). I wanted
outside/expert opinion on this.

I also just confirmed this by assigning only the WRITE permission to a
folder for "Guests" and the "effective permissions" for "Guests" are: Create
Files/ Write Data, Create Folders / Append Data, Write Attributes, Write
Extended Attributes. WRITE does not include "Traverse Folder/ Execute File".

Thank you very much Shenan for getting back so quickly and for your
confirmation. If you have any further thoughts/advise on this please let me
know and I will pass them on.

Regards,


/s/Norman A. Levinson, MCSE, CCNA, CWSP


"Shenan Stanley" wrote:

> chaosUnplugged wrote:
> > Which NTFS permissions allow users to run applications?
> >
> > Modify (yes)
> > Read and Execute (yes)
> > Full Control (yes)
> > Write (No)
> >
> > It appears that WRITE alone would not allow a user to run
> > applications. Can anyone cite resource to support (or disprove) this
> > and why? Thanks!
>
> Read and Execute is usually all that is needed.
> Anything else may be on a few files for the application - but not the
> executable itself.
>
> (Why would you think "WRITE" would allow anyone to EXECUTE an application?)
>
> http://www.experts-exchange.com/Secu..._21586050.html
>
> HOW TO: Set, View, Change, or Remove File and
> Folder Permissions
> http://support.microsoft.com/kb/308418
>
> HOW TO: Set the My Documents Folder as Private in Windows XP
> http://support.microsoft.com/kb/298399
>
> HOW TO: Set, View, Change, or Remove Special Permissions
> for Files and Folders
> http://support.microsoft.com/kb/308419
>
> --
> Shenan Stanley
> MS-MVP
> --
> How To Ask Questions The Smart Way
> http://www.catb.org/~esr/faqs/smart-questions.html
>
>
>