2

"your users are out of order, click re-order to fix" - what exactly does this mean and why does it effect a programs ability to load?

OS: Windows 7 64 bit ultimate edition

What does it mean when right-clicking on a file and clicking on security you see a message that says this "your users are out of order, click re-order to fix".

What exactly does it mean that users are out of order and how could this prevent a program from working properly? Please let me know if you need more info to answer this and I will provide it.

Thank you

phemmer
  • 5,909
  • 2
  • 27
  • 36
Patrick
  • 401
  • 3
  • 5
  • 15
  • 2
    Can you give a screenshot of this message? (If you punch "click re-order to fix" into Google, this question is the only hit. So I'm suspecting you either have some very unusual software installed or are misreading/miscopying the message.) – David Schwartz Apr 27 '12 at 21:15
  • The order of user list entries is not relevant to SAM resolution or the ACL. Also, I have never heard of this message. – Falcon Momot Apr 27 '12 at 21:30

2 Answers2

4

Windows ACLs are applied in a certain order to be effective. Back in the WinNT and Windows 2000 days, the command-line utilities to modify file-permissions could cause problems if you blindly added/removed things. For example, if you were granting a group Modify permissions when they'd previously been granted R/O, it would add a second ACL with Modify and the ACL list would still have both.

They've since fixed this in the command-line utilities. However, this means that the various other utilities over the years have had to be modified to handle the old-broken behavior, and that's the dialog you see when you encounter it.

It is safe to click 'Fix'.

sysadmin1138
  • 133,124
  • 18
  • 176
  • 300
  • Thanks! This makes perfect sense. I didn't mention it but users were given permissions via a script which used command line but in the same way as win xp. That must have done it. Thanks! – Patrick Apr 28 '12 at 02:21
-1

It means that the people using the system are not behaving correctly (usually with issues like PEBKAC, ID-10t or layer 8 failures). These users are often not salvageable, and so you need to order new users from Microsoft to replace them in order to remove the errors and restore normal operation. Disposing of the old users can be a hassle however, since they do not have self-shutdown functionality. RFC1097 can be useful if the interface protocol is telnet, but this isn't usually the case nowadays. One often has to resort to bruteforce methods, but RFC3251 can be used to perform this remotely which helps to avoid the mess.

Community
  • 1
mgorven
  • 30,615
  • 7
  • 79
  • 122