Page 1 of 1 1
Topic Options
#122971 - 2004-07-15 08:40 AM unable to see drivers folder
jechilt Offline
Starting to like KiXtart

Registered: 2000-12-01
Posts: 102
Loc: Denver Colorado
ok....got a challenge and I am not sure how to do this...

as administrator there is no problem.
logon script is looking for the permissions of a file (usbstor.sys) in the winnt\system32\drivers folder. as an administrator, we can see the drivers folder. as a user, the drivers folder is NOT visible and system files are hidden from the user. when the script runs as the user, the result is "File Name Can Not Be Located", even though it does exist.
Is there a sly kix-way to see the directory so we can locate the file and read it?
_________________________
John
LM Contractor
One of the 2 dads

Top
#122972 - 2004-07-15 09:11 AM Re: unable to see drivers folder
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
well, before saying anything, I would need to ask why you would need to view the permissions of the file?
_________________________
!

download KiXnet

Top
#122973 - 2004-07-15 09:40 AM Re: unable to see drivers folder
jechilt Offline
Starting to like KiXtart

Registered: 2000-12-01
Posts: 102
Loc: Denver Colorado
well, the reason we need to see it is for security reasons.

I am not sure why the reason for our inquiry is important to the forum. We could be looking for permissions on any file for any reason. I hope you don't think I put posts on the forum just to see how good of a script can be developed for no good reason....
I am not as good of a "kixter" as most of the guru's here and the assistance from the forum has helped us tremendously. I, for one, am very thankful for this board and the help that is provided in it. This is why I continue to come to the board and ask for help.

Our systems are on a classified network and the systems must meet certain security requirements. Reading permissions on selective files helps us identify vulnerabilites in our systems which have the potential of putting National and/or Global security at risk.
_________________________
John
LM Contractor
One of the 2 dads

Top
#122974 - 2004-07-15 10:25 AM Re: unable to see drivers folder
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
lol.
national security.

k, back to reality, I thought the reason for my question is obvious.
if you can't get to the file as normal user, how would he be able to read the security info.
and if he doesn't get to the file, what does it matter what security it has if no normal user can access the file?

in this specific case I think it's possible to see the file just fine but the reality of doing workstation administration via logonscript of locked down user... it just doesn't make sense.
hence the question, is there some real need or is it just for "we wanna know"
and, it turned to be the latter, sadly.
_________________________
!

download KiXnet

Top
#122975 - 2004-07-15 12:36 PM Re: unable to see drivers folder
jechilt Offline
Starting to like KiXtart

Registered: 2000-12-01
Posts: 102
Loc: Denver Colorado
i appreciate the help, but am just a little irritated. sorry...

we are going to use SMS to push the script and we avoid the user permission altogether.
in response to your question about normal user having access to a file has somehow missed its mark. If you look from a broader pespective of an Operating System (OS), users don't have to have visible 'access' to a file or folder in order for the OS to use the required resource.

I am sorry if this thread has gone astray...I was really just hoping to know if there was a possible solution to the challenge...etc...etc...etc.

_________________________
John
LM Contractor
One of the 2 dads

Top
#122976 - 2004-07-15 12:49 PM Re: unable to see drivers folder
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
John,

When you say you can see this folder as an Administrator, can you run the script and get the information you're requesting when run as an administrator or does it also fail to find the file?

There is no magic bullet either from KiXtart or any other application (that is not attempting to circumvent and possibly exploit a flaw in the system) that can show the permissions on a file that a user can not gain access to that level. You could though use a remote administrative script and check it on any remote system that you have Administrative rights on.

I'm curious if there is a possible error in your script or not is why I ask. I'm not at work right now but my home computer in a Workgroup does allow all normal user READ access to this folder location. Not sure, but I'd think that it is or would be the same on a Domain as well.

Top
#122977 - 2004-07-15 12:49 PM Re: unable to see drivers folder
Lonkero Administrator Offline
KiX Master Guru
*****

Registered: 2001-06-05
Posts: 22346
Loc: OK
well, can't test but simple:
dir /s
or attrib call should reveal plenty on "inaccessible" files.
when it comes to ntfs permissions, those can't be overridden that easily, of course.
_________________________
!

download KiXnet

Top
#122978 - 2004-07-15 01:01 PM Re: unable to see drivers folder
jechilt Offline
Starting to like KiXtart

Registered: 2000-12-01
Posts: 102
Loc: Denver Colorado
NTDOC - I am not 100% on this, but I do think that MS Win2K has their settings as such, out of the box install..
1. When you go to WINNT directly, the right side window will be white and there will be a link that says "Show Files" or something to that degree. These are not hidden, but they are not visible to the user at this point. When we click on show files, we get to see the files. However, I also believe that the SYSTEM files are hidden from the user (by default)...so any .sys (.dll, etc) files are not visible by the user. Though the files exist, the user can't see them. Remember, we are trying to read the "drivers" directory (not driver). The drivers directory is hidden from the user.

Our systems are modified so the administrator can see the files and system files, but the user can not. The system is locked down and the user can't change that status.

As mentioned a few responses back, we are going to use SMS to run the package with an admin level account so we should be able to avoid the problem altogether.

I do not think there is any bug in the script...but at my experience level, I am sure I am more of the bug than the application


Lonkero - there are times to hate NTFS and for me, right now is one of those moments!


Edited by jechilt (2004-07-15 01:02 PM)
_________________________
John
LM Contractor
One of the 2 dads

Top
#122979 - 2004-07-15 01:10 PM Re: unable to see drivers folder
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
That is ony a GUI setting as far as I know that prevents Explorer from showing, but I think KiXtart should be able to access this location just fine.

Try giving some code like this a try as a normal user and I "think" it will work. Make sure the file you use is really on the test system.

Code:
If Exist ('%windir%\system32\drivers\usb8023.sys')

'Found file you were looking for: ' ?
Else
'Unable to locate the file you were looking for: ' ?
EndIf


Top
Page 1 of 1 1


Moderator:  Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart 
Hop to:
Shout Box

Who's Online
1 registered (Henriques) and 2516 anonymous users online.
Newest Members
fgarcia, Viginette, ManuvdWielNL, Sir_Barrington, batdk82
17889 Registered Users

Generated in 0.074 seconds in which 0.035 seconds were spent on a total of 12 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org