Is the Write-Extended Attributes NTFS permission required on a file share
file in order to give a user write access to a file?
I normally don't like to give Write Extended Attribute access to local files
and I generally design ACLs to forbid such access because of the way viruses
and trojans can use extended attributes to hide payloads in the file as
extended attributes. I'm finding on a file share that one of my users
cannot get Modify contents of any files until I give write access on
Extended Attributes.
Is the requirement to enable Extended Attributes different for file shares
and local files?
--
Will
|