Re: Everyone take ownership

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 06/14/05 

Date: Tue, 14 Jun 2005 08:31:39 -0700

AnttiH,

Just for completeness, please verify that on the involved machines
the security policy setting in the User Right section of the Computer
Security policy section the User Right to Take Ownership of objects
is still set at the default of only naming Administrators group. 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"AnttiH" <gumfire@despammed.com> wrote in message
news:3pAre.172$Hp3.92@read3.inet.fi...
> Roger Abell wrote:
>
> > Can you open a cmd prompt and issue
> > cacls X:  > c:\perms.txt
> > where X: is the letter to which the share has been mapped
> > and c:\perms.txt  is any file to which you want the output
> > redirected.  The content of this file will have all NTFS
> > setting in effect on the mapped folder.
> >
> > In order to Take ownership and account would need to
> > either be in GroupA or GroupB (which have grants of Full)
> > based on what you have said, that there are no other grants.
> > Posting here the results stored into that c:\perms.txt file
> > would help us verify that this is so.
> >
>
> Hi.
>
>
> This is cacls H:\FOLDER, which is the folder we want to make secure.
> H:\FOLDER BUILTIN\Administrators:(OI)(CI)F
>              domain\groupA:(OI)(CI)F
>              domain\groupB:(OI)(CI)F
>
> The person who "has permission to take ownership" is NOT in any of these
> groups. Not inherited or anything. The person however has Full Control
> on the H:\ -drive.
>
> Hope this helps,
> AnttiH

Relevant Pages

  • Re: Restrict login to 1 account
    ... security policy/security settings/local policies/user rights. ... security policy setting, however any settings in domain security policy user ... > I would like to restrict login to only 1 account. ...
    (microsoft.public.win2000.security)
  • Re: security managment and policy monitoring
    ... bardia wrote: ... >enable me to verify that an organization's security policy is being ... the "techie" part on the boxes? ...
    (comp.security.misc)
  • Re: Accessing Windows 2000 Server Remote Registry
    ... address instead of name to see if that helps and verify that you can ping ... from incompatible security settings [security options in security policy ... Examples of Compatibility Problems particularly for anonymous access and ... etc. to a Windows 2000 member server from ...
    (microsoft.public.win2000.security)
  • Re: HELP! CreateProcessWithLogonW issue
    ... > also has every local security policy setting imaginable. ... If you enable "Detailed process tracking" in the auditing settings ... in the security event log? ...
    (microsoft.public.dotnet.framework)
  • Re: HELP! CreateProcessWithLogonW issue
    ... > also has every local security policy setting imaginable. ... If you enable "Detailed process tracking" in the auditing settings ... in the security event log? ...
    (microsoft.public.platformsdk.security)