Hello,
I am doing deployments using MDT which uses the wim file format for images.
I use imagex.exe to add a folder to an existing wim image offline and then
deploy it. The folder on the deployed machine winds up having NTFS
permissions from the system that was used to add the folder (the system
imagex was run on) and NTFS permission that I would expect it to have from
inheritance on the deployed systems filesystem.
this brings many questions to mind. Could anyone enlighten me as to whats
happening? are the perms from the machine used to run imagex and add the
folder even valid on the deployed machine... or are the sids changed
automatcally so that they correctly apply to the deployed machine? in other
words the group 'administrators' on one machine is different from the group
'administrators' on another... I assume their sids would be different,
right? no?
bottom line is I need to know if I can leave what its doing or if it may
make my filesystem unstable. I'm fine with the actual security level granted
if the permissions are actually valid, more concerned about stability, and I
would like to understand whats going on.
anyone?
|