[cifs-protocol] [REG:114112312079323] Re: Undelete operation security considerations [MS-ADTS] 3.1.1.5.3.7.1 [REG: 114102711953179]

[Obaid Farooqi]

Hi Nadiya:
I have created a new issue to deal with the security descriptor of deleted objects. I have also filed a bug to document the two additional permission to undelete the tombstone objects against MS-ADTS.

Regards,
Obaid Farooqi
Escalation Engineer | Microsoft

Exceeding your expectations is my highest priority.  If you would like to provide feedback on your case you may contact my manager at nkang at Microsoft dot com

From: Obaid Farooqi
Sent: Wednesday, November 19, 2014 1:31 PM
To: 'Nadezhda Ivanova'
Cc: MSSolve Case Email; cifs-protocol at samba.org
Subject: RE: [REG:114102711953179] Re: Undelete operation security considerations [MS-ADTS] 3.1.1.5.3.7.1 [REG: 114102711953179]

Hi Nadiya:
I tried the steps in the kb article and that did enable me to display the objects in the “Deleted Objects” containers for a non-admin user.
I’ll file a bug against MS-ADTS to include the “LIST CONTENTS” and “READ PROPERTY” permissions on CN=Deleted Objects container to undelete a deleted object.

I am working to see how can I provide you with instructions to see the security descriptor of the deleted objects container.

Regards,
Obaid Farooqi
Escalation Engineer | Microsoft

Exceeding your expectations is my highest priority.  If you would like to provide feedback on your case you may contact my manager at nkang at Microsoft dot com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/cifs-protocol/attachments/20141123/582cf363/attachment.html>