ACL with group name starting with a #

Discussion in 'Server Security' started by Michel Lapointe, Jun 16, 2005.

  1. Hello,

    I would like to know why does the Folder ACL windows append a \ in front
    of a group name starting with a #.

    I know that a # as the first character in an LDAP query is against the
    syntax, but the previous admin have create the group with this character
    anyway.

    Therefore my problem is why when I use a group like #groupname in file
    security throught the normal File Security Interface, Windows append a \ in
    front of the name.

    Repro step:
    1. Create a group in AD with a # as the first character
    2. Create a new folder and assign Full access to this new group. The
    name will display properly
    3. Close the ACL windows
    4. Wait a couple of minutes
    5. Reopen the ACL windows. The name will be displayed with a \ appended
    to the name like \#groupname

    If anyone know why, or know a way to avoid it (it seem to be purely
    esthetical) without removing the #, it will be appreciated

    Thank

    ML
     
    Michel Lapointe, Jun 16, 2005
    #1
    1. Advertisements

  2. My guess is that the \ is an escape character, to cause # to be treated as a literal #.
     
    Jerold Schulman, Jun 16, 2005
    #2
    1. Advertisements

  3. I would say it is a bug in the file system ACL editor GUI dialog. It doesn't
    occur in the AD ACL Editor GUI dialog and doesn't occur when enumerating the
    permissions from the command prompt.

    joe
     
    Joe Richards [MVP], Jun 17, 2005
    #3
  4. That's my guess also...

    It seem that the ACL GUI insert the \ to treat the # as an escape character
    for some processing but doesn't clean the string before display...

    Thank to both of you to confirm my guess...

    ML
     
    Michel Lapointe, Jun 17, 2005
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.