Windows XCACLs

Abstract

Windows NT, 2000 and XP use a technology called XCACLs to manage security access to files in a network environment. Under some circumstances, it is possible for these XCACLs to become damaged, and render the Capable 21C database inaccessible to network PCs even though the database file may be visible when browsed using a Windows Explorer, and may open normally on the main/server PC. This knowledgebase article describes how to repair damaged XCACLs.

Underlying challenge

XCACLs stands for eXtended Command Access Control Lists.

Manipulating Windows XCACLs is not supported under Windows XP Home. Even with Windows XP Professional, it is not an easy task, and should only be performed by a technician with an understanding of this Windows technology. This knowledgebase article describes some simple steps to workaround the problem of damaged XCACLs.

Resolution

Whilst it may not be possible to repair damaged XCACLs easily, it is possible to bypass the damaged ones and created new (undamaged) ones. To diagnose this kind of damage, the following symptoms are typical:

  • Capable 21C operates normally on the main/server PC. /li>
  • Capable 21C will not start normally on other network PCs.
  • If a Windows Explorer is used to try to browse the shared network folder where the Capable.MDB database file resides, the file may be non-visible to network PCs.
  • Even if the Capable.MDB file is visible, it may not be accessible. Try to open the file using Microsoft Access to test this possibility. Microsoft Access will report that the file cannot be found if the XCACLs are damaged.
  • The file may be visible, and readable, but not writeable. Try to open the file using Microsoft Access to test this possibility. Microsoft Access will report that the file is read-only if the XCACLs are damaged. /li>
  • The XCACLs on the shared folder may be damaged (as opposed to the Capable.MDB file). To test this, create a text file in the shared folder. If the text file cannot be created, the XCACLs are damaged.
  • To bypass the damaged XCACLs, follow the instructions shown below.

    Detailed Information

    To bypass damaged XCACLs, complete these steps:

  • Close Capable 21C on all PCs.
  • Note the name of share on the folder where the database resides on the main/server PC. This name will be used in step 8.
  • Remove the share on the folder where the database resides on the main/server PC.
  • Note the name of the folder where the database resides on the main/server PC. This name will be used in step 6.
  • Rename the folder to something else (eg CapableDmgd)
  • Create a new folder using the original name noted in step 4.
  • Copy the entire contents of the renamed folder into the newly created folder. DO NOT ‘MOVE’ THE FILES INTO THE NEW FOLDER. Ensure that all files and sub-folders are copied.
  • Share the new folder using the share name noted in step 2. Ensure that the share permits changes to be made to files in the shared folder.
  • Restart Capable 21C normally on all PCs.
  • This knowledge resource is designed for use on a Windows (tm) XP system operating at a screen resolution of 1024x768 or better. Windows Media Player must be installed for this training resource to operate correctly.

    Copyright 2008 Capable Software Pty Ltd

    Training Sessions

    Fundamentals Training Modules

    Intermediate Training Modules

    Advanced Training Modules

    Other Resources

    Return to Capable Software home

    Contact Technical Support