Re: Folder creator owner

one must take away owner status to fully control NTFS permissions

--
Roger Abell
Microsoft MVP (Windows Server : Security)

"Antoine Auger-Giroux" <AntoineAugerGiroux@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
in message news:A95C7E4A-1425-4ED2-BA01-315E61FD9389@xxxxxxxxxxxxxxxx
> Hi all,
>
> We have a windows 2000 file server
>
> We recently discover that a Folder Creator Owner could change the folder
> permission right. So all our security settings could be over pass by a
> owner
> who set it's own permission.
>
> question: Is there a way to prevent a Owner of a folder or a file to
> change
> the permissions of it ? So, still be the owner, but wihtout the
> permissions
> to change the security settings.
>
>
> Thanks
>
> Antoine Auger-Giroux


.

Relevant Pages

  • Re: stored procedures and permissions
    ... If Todd is new and can't alter any objects what are the ... and "what permissions does y need" rather then thinking of x ... Microsoft SQL Server 2000 SP3 Security Features and Best ... >> Server checks permissions on each object where the owner is ...
    (microsoft.public.sqlserver.security)
  • Re: permissions to import after a new workgroup file?
    ... To import as a new owner from a previous owner, ... for the objects in the original database. ... Normally permissions are assigned via Groups. ... You shouldn't be altering security measures with the "default workgroup". ...
    (microsoft.public.access.security)
  • RE: Project Update Capability
    ... I would check the user/group security that these users are in. ... Under the Global permissions, uncheck the ... > Although I am still the owner of the projects created, when I logon as ...
    (microsoft.public.project.pro_and_server)
  • Re: No user with admin permissions
    ... You need to login as the owner. ... a person in the Admins group does have permission to change ... type permissions, that is, no user who can change security, a user ...
    (microsoft.public.access.security)
  • Re: security for 100+ user and dbs without having to signin
    ... The owner of a DB can always give themselves permissions. ... by someone unaware of security, then likely they were logged in as ... > database remove all unnecessary permissions from ...
    (microsoft.public.access.security)