BUG: Windows NT 4.0 SP4 ACL Editor Cannot Edit After Deleting a User

• Microsoft Windows NT Workstation version 4.0 SP4
• Microsoft Windows NT Server version 4.0 SP4
• Microsoft Windows 2000 Professional
• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Advanced Server

SYMPTOMS

After you install Security Configuration Manager for Windows NT 4.0 Service Pack 4, the Access Control List (ACL) editor is modified.

If you use the editor to grant permissions to a user and then later delete that user in User Manager, you will get the following error message when you try to view the permissions on the folder:

Unable to display security information.

CAUSE

This is a problem with the new ACL Editor, which is installed with Security Configuration Manager, not being able to handle the situation of where SID to Name resolution is not accomplished.

RESOLUTION

To work around this problem, do either of the following:

• To view the permissions on the folder, use WINFILE.
  
  
  1. Click Start, click Run, type winfile.exe, and then click OK.
  
  
  
  2. Go to the folder where permissions were changed.
  
  
  
  3. Select the folder and the click Permissions on the Security menu.
  
  
  
  4. Click to select the Replace permissions on subdirectories check box, click OK, and then click Yes. Now you will be able to use Explorer or open My Computer and use the modified ACL editor.
  
  
  



• Another solution would be to revert back to the old ACL Editor. For additional information about reverting back to the old ACL Editor, please see the following article(s) in the Microsoft Knowledge Base:
  

  Q195509 Installing SCM from SP4 Changes Windows NT 4.0 ACL Editor

STATUS

Microsoft has confirmed this to be a problem in Windows NT version 4.0.

Additional query words: 4.00

Keywords : kbbug4.00
Version : WINDOWS:2000; winnt:4.0 SP4
Platform : WINDOWS winnt
Issue type : kbbug