Nope, the owner of a secured object can modify the Security Descriptor in any
way they want. It is hardcoded functionality.
--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Antoine Auger-Giroux wrote:
Hi all,
We have a windows 2000 file server
We recently discover that a Folder Creator Owner could change the folder
permission right. So all our security settings could be over pass by a owner
who set it's own permission.
question: Is there a way to prevent a Owner of a folder or a file to change
the permissions of it ? So, still be the owner, but wihtout the permissions
to change the security settings.
Re: Lost Folder Ownership and Access ...Security) ... I had to reset the owner to Administrator for all subcontainers ... > folder or file on the shared drive using the second computer, ... > owner is me, karlo.... (microsoft.public.windowsxp.security_admin)
Re: Calendar Permissions ... I set the default permission on the free/busy folder to OWNER,... enabled me to set new appointments in others diaries, ... (microsoft.public.exchange.admin)
[NEWS] eNom Domain Registration Services Domain Hijacking Vulnerability ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ...eNom provides Internet domain name services. ... the owner of the domain ...Domain Transfer Request for EXAMPLE.XXX ... (Securiteam)
Re: Pentester convicted.. ... > the owner didn't want me to have it but I brought it back to ... Concerned about Web Application Security?... You have an option to go with a managed service or an enterprise software. ... (Pen-Test)
Re: GetNamedSecurityInfo - Read Owner pt II ... The Security Descriptor pointer... > is much simplier than the raw PInvoke Win32 APIs.... I am a system administrator,... >> unsuccessful reading the owner of a file using Win APIs such as ... (microsoft.public.dotnet.languages.vb)
