NTFS creator/owner property and permissions

From: Jim Dieff (jdieffenbacher@promenix.com)
Date: 11/13/02 

From: "Jim Dieff" <jdieffenbacher@promenix.com>
Date: Wed, 13 Nov 2002 11:33:42 -0800

If you give the Modify but not Full Control NTFS
permission, this prevents the ACL from being changed.

>-----Original Message-----
>Hello,
>
>As I'm sure most of you are already aware, when a user
creates files and/or
>directories on an NTFS volume, that user can always
modify the permissions
>of the files and folders he or she has created, due to
the fact that he or
>she is the creator/owner.
>
>I am setting up NTFS permissions on a Windows 2000 file
server. If
>possible, I would like to set up the permissions in such
a way that a user
>can create files and subdirectories within a directory
but not modify the
>ACLs on the files and subdirectories he/she creates. Is
this possible using
>the advanced security settings?
>
>Thanks all,
>Andy
>
>--
>[Remove "I hate spam" message from my return address to
send e-mail.
>Otherwise feel free to respond to the newsgroup instead.]
>
>
>.
>

Relevant Pages

  • Re: NTFS creator/owner property and permissions
    ... regardless of whether they have full control or modify ... permissions, that user can then modify the permissions of the file or ... In NTFS, the owner of a file or directory can always modify the permissions, ... > If you give the Modify but not Full Control NTFS ...
    (microsoft.public.win2000.security)
  • RE: Differences between Change share permission and Modify NTFS pe
    ... how share and NTFS permissions interact, I was asked by a student why Modify ... I see no real difference between them ...
    (microsoft.public.windows.server.general)
  • Re: Windows shared folder not respecting NTFS filesystem permissions?
    ... the share access is "WRITE" but the NTFS is "READ". ... security permissions will "always" superceed NTFS file permissions with the "least" permissive access. ... That is why the standard for sharing folders is to give "EVERYONE" FULL access at the share level then use NTFS permissions to control the folder access. ... "From an administrator point of view, ACL inheritance simplifies access control management. ...
    (microsoft.public.windows.server.sbs)
  • NTFS creator/owner property and permissions
    ... that user can always modify the permissions ... I am setting up NTFS permissions on a Windows 2000 file server. ... ACLs on the files and subdirectories he/she creates. ...
    (microsoft.public.win2000.security)
  • RE: Share and NTFS permissions
    ... Owner of something can always change permissions on it. ... supply an ACL for some things. ... I recently wrote about file ownership and other NTFS oddities ...
    (Focus-Microsoft)