Which privilege does the Windows NT 4.0 Bypass traverse checking advanced user right grant to user accounts?
Bypass traverse checking, also known as the SeChangeNotifyPrivilege, is granted by default to the NT 4.0 Everyone group. Bypass traverse checking causes the Windows security subsystem to bypass directory traversal access checks. Users who have this privilege can access a subdirectory even though they don't have access to its parent directory. When users don't have this privilege (i.e., when Directory traverse checking is enabled), the OS will check not only the ACL of the requested file but also the ACL of each parent directory of that file up to the logical drive's root directory. In this scenario, the OS will deny access to users who don't have List Folder Contents access permissions on every parent directory.
Because granting the Bypass traverse checking user right accelerates access to NTFS-formatted volumes, it also provides an NTFS optimization. Bypass traverse checking also lets users receive notifications of changes to files and directories (Windows Explorer uses this feature). . . .
Register
