RE: Share and NTFS permissions

From: Monrad.DC@xxxxxxxxxxxx
Date: 5 Jan 2007 18:23:35 -0000

We have found an issue with giving full rights to the share:
The NTFS file owner can still change permissions.

The creator of a file is the owner and has the ability to change NTFS permissions on that file/folder, regardless of what the existing NTFS rights are!
This allows the file creator to alter the permissions either blocking access or giving excess permissions.

A solution in this case is to create the share with Everyone( or Authenticated Users/Given group...) Change rights and Administrators FULL Control. NTFS is then set as desired. Limiting the share to Change prevents the owner from modifying NTFS rights if accessing the file through the share, but leaves everything else.

Drew Monrad

Follow-Ups:
- RE: Share and NTFS permissions
  - From: Jim Harrison

Prev by Date: Re: How to deploy Microsoft OWA without using ISA?
Next by Date: Re: How to deploy Microsoft OWA without using ISA?
Previous by thread: How to deploy Microsoft OWA without using ISA?
Next by thread: RE: Share and NTFS permissions
Index(es):
- Date
- Thread

Relevant Pages

Re: FTP control
... > I would like to use NTFS security settings to control who ... I would suggest getting a third party FTP server, ... if you set quota and these permissions for that group you can ... Information Server (IIS) Web site, ...
(microsoft.public.win2000.security)
RE: Any way to remove ADMIN$ only?
... Mixing the share permissions and the NTFS permissions generally cause ... which means more groups/people access the same shares. ... Along comes another admin that creates a share at a higher level in the ...
(Focus-Microsoft)
Re: W2k and Front Page Security
... >> up now using subweb and setting permissions throgh ... >> with NTFS permissions contolling folders.When I set ... >FrontPage managed content areas you do really need to ... >authorship of every groupX subweb in addition ...
(microsoft.public.win2000.security)
Re: Removing "File and Folder tasks"
... create a Group Policy to enforce the NTFS ... permissions, and then link it to that OU. ... Do NOT attempt to apply NTFS ... folder and user profile folders because if you incorrectly apply NTFS ...
(microsoft.public.windowsxp.security_admin)
Re: Removing "File and Folder tasks"
... You can put the computers you want to enforce the NTFS permissions on into ... create a Group Policy to enforce the NTFS ... folder and user profile folders because if you incorrectly apply NTFS ...
(microsoft.public.windowsxp.security_admin)