Re: "Take Ownership" gives to Group

From: chris@nospam.com
Date: 03/24/03


From: chris@nospam.com
Date: Sun, 23 Mar 2003 18:37:55 -0800

On Mon, 24 Mar 2003 00:11:07 GMT, "Christopher Reilley"
<chinesecompanion@attbi.com> wrote:

>Because the Administrators group is intended to function as a unit. Any time
>a member of the Admin group takes ownership of an object, the entire group
>has ownership, so that it may later be re-assigned by any Admin.

Trust me, no-one considers this a feature. This also has the nice
effect of rendering auditting useless. Gee, which administrator
created, deleted, or otherwise is messing with the system.



Relevant Pages

  • Re: How can I remove security from Access 2003
    ... the admin group as well as all other groups just for drill, ... shows my user id has full control and ownership. ... > You'll need to join the workgroup that was used to secure the database. ...
    (microsoft.public.access.security)
  • Re: "Take Ownership" gives to Group
    ... Because the Administrators group is intended to function as a unit. ... has ownership, so that it may later be re-assigned by any Admin. ... Admin group, take ownership, and then reinstate your membership to Admin ... > I am member of). ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Changing the Profilelist (ProfileImagePath) in regedit
    ... After assigning it to admin group, ... "owner" rights supersede administrator rights. ... the files then it would deny access to those protected files. ... How To Take Ownership of a File or Folder ...
    (microsoft.public.windowsxp.customize)
  • Re: Deleting Folder Sharing Violation
    ... Did you take ownership for admin group only and removed all other ... Maybe a stupid answer, but I have a similar problem and this ... Prev by Date: ...
    (microsoft.public.win2000.general)
  • Re: Rights on Xp in 2000 Domain
    ... few users could not run MS Access 2000 unless they were a member of the ... local Administrators group. ... > systems Admin group and couldn't do it, ... >> Another idea is for you to install all of the software that they are ...
    (microsoft.public.win2000.active_directory)