Savedump.exe Now Provides More Security to Memory.dmp (173817)

The information in this article applies to:

Microsoft Windows NT Server 4.0 Terminal Server Edition
Microsoft Windows 2000 Server
Microsoft Windows 2000 Advanced Server
Microsoft Windows 2000 Professional
Microsoft Windows NT Workstation 4.0
Microsoft Windows NT Server 4.0
Microsoft Windows NT Server, Enterprise Edition 4.0

This article was previously published under Q173817

SYMPTOMS

Savedump.exe creates a Memory.dmp file with the NTFS permissions inherited from the parent directory. In most cases, this includes the Everyone group with Full Control.

RESOLUTION

To provide additional security, Savedump.exe has been altered to assign an access control list (ACL) to Memory.dmp with the following permissions:

Administrators - Full Control
System - Full Control

To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

152734 How to Obtain the Latest Windows NT 4.0 Service Pack

STATUS

Microsoft has confirmed that this is a problem in Windows NT 4.0 and Windows NT Server 4.0, Terminal Server Edition. This problem was first corrected in Windows NT 4.0 Service Pack 4.0 and Windows NT Server 4.0, Terminal Server Edition Service Pack 4.

Modification Type:	Minor	Last Reviewed:	9/23/2005
Keywords:	kbHotfixServer kbQFE kbbug kbfix KB173817