Explorer.exe crashes on security tab access

only in those folders where there is
s-1-22-1-0 (root?)

problem on any pc

explorer.exe
10.0.17134.677
b4a88dff
ntdll.dll
10.0.17134.799
7f828745
c0000374
00000000000f479b
576c
01d5325e22a79e3d
C:\windows\explorer.exe
C:\windows\SYSTEM32\ntdll.dll
2f86275a-8b13-4a2b-a2f6-965ee98afd1d

Hi,

we already addressed this issue in our bugtracker.
http://forge.univention.org/bugzilla/show_bug.cgi?id=49747

The explorer crashes if the directory owner of the share is set to root, or the directory owner group is set to root.
Than you simply can adjust these setting on the share itself via the UMC setting the directory and group directory ownder to administrator.
If this doesnot work you maybe have also acls set on the share, so that you find something like this too, when you check with getfacl:

# file: shares/explorer
# owner: Administrator
# group: Domain\040Admins
user::rwx
user:root:rwx  
user:Administrator:rwx
group::rwx
group:root:r-x 
group:Domain\040Admins:rwx
group:Domain\040Users:r-x
group:Administrators:r-x
mask::rwx
other::---
default:user::rwx
default:user:Administrator:rwx
default:group::---
default:group:root:r-x
default:group:Domain\040Admins:rwx
default:group:Administrators:rwx
default:mask::rwx
default:other::---

Then you can remove these via setfacl like this:

setfacl -x u:root,g:root,d:u:root,d:g:root /shares/explorer/

→
root@master:~# getfacl /shares/explorer
getfacl: Entferne führende '/' von absoluten Pfadnamen
# file: shares/explorer
# owner: Administrator
# group: Domain\040Admins
user::rwx
user:Administrator:rwx
group::rwx
group:Domain\040Admins:rwx
group:Domain\040Users:r-x
group:Administrators:r-x
mask::rwx
other::---
default:user::rwx
default:user:Administrator:rwx
default:group::---
default:group:Domain\040Admins:rwx
default:group:Administrators:rwx
default:mask::rwx
default:other::---

Hope this helps

Greetings

1 Like
Mastodon