Why Is Windows 2000 Trying to Get WriteAttributes on EXE F..

Archived from groups: microsoft.public.win2000.file_system,microsoft.public.win2000.security,microsoft.public.win2000.general (More info?)

On a Windows 2000 system, users who are logged in through Terminal Services
are getting audit messages in the Security event log that complain they
don't have permissions on many different files, typically these are EXE
files that they should only access on a read-only basis. In reviewing the
list of permissions, what they appear to be looking for is WriteAttribute
permission. Why would a normal user be trying to open up CMD.EXE or
Outlook Express MSIMN.EXE with WriteAttributes permission? Since it is
transparent to the user I assume that this is Windows' normal behavior, and
it seems strange that Windows would want to write attributes every time
these files are opened.

--
Will
westes AT earthbroadcast.com