Re: Advanced security permissions in Windows 2000 server

From: Dmitry Korolyov [MVP] (d__k_at_removethispart.mail.ru)
Date: 08/20/04


Date: Fri, 20 Aug 2004 17:06:15 +0400

You should also be aware that for any file created, the user who created it
is the owner, and thus can set any permissions on the file - including Full
Control to self, and then just delete the file.

-- 
Dmitry Korolyov [d__k@removethispart.mail.ru]
MVP: Windows Server - Active Directory
  "Miha Pihler" <mihap-news@atlantis.si> wrote in message
news:eSnLQTrhEHA.3612@TK2MSFTNGP12.phx.gbl...
  Try it the way Dmitry suggested, but be aware that client can still open
  file, erase all content and save the file. In either case you lose the
  content of the file.
  Mike
  "Andrew" <anonymous@discussions.microsoft.com> wrote in message
  news:9d9801c4867c$bb311800$a601280a@phx.gbl...
  > Seems that part of the advanced security permissions for
  > Windows 2000 server don't work properly. I'm reffering at
  > Create Files \ Write Data and Create Folders \ Append
  > Data. You may append just in case Delete is checked but in
  > that case you may delete the file itself.
  > So is it possible to set permissions to a folder such way
  > that you may add \create files append data but not delete
  > the file?


Relevant Pages

  • RE: Moving home folders still have old permissions
    ... resource domain migration to Windows Server 2003 ... Moving home folders still have old permissions ... Now I wanted to move some folders from an old file-sharing NT BDC ...
    (microsoft.public.windows.server.migration)
  • Re: Permission Inheritance
    ... Files and folders will inherit the permissions of the ... MVP for Windows Server - Software Distribution ...
    (microsoft.public.windows.server.general)
  • Re: Advanced security permissions in Windows 2000 server
    ... When you check the append box it will create a temp file ... >is the owner, and thus can set any permissions on the ... >> So is it possible to set permissions to a folder such ...
    (microsoft.public.win2000.security)
  • Re: reporting permissions on folders
    ... windows server 2003 file server. ... and we need to review the permissions people have to the various folders ... and subfolders so we need to generate a readable report as to who has ...
    (microsoft.public.windows.server.general)
  • Re: Advanced security permissions in Windows 2000 server
    ... Windows Server - Active Directory ... Seems that part of the advanced security permissions for Windows 2000 server don't work properly. ... You may append just in case Delete is checked but in that case you may delete the file itself. ... So is it possible to set permissions to a folder such way that you may add \create files append data but not delete the file? ...
    (microsoft.public.win2000.security)