Re: Folder creator owner

Joe has answered you. One must currently provide value-added
code to accomplish this, such as something the is notificed on new
NTFS object creation that then goes in a alters the Owner.
I have proposed years back that we need ability to make container
objects so that new objects either follow the existing rules, or have
owner value inherited from container object. Regretably all Windows
(NT family) versions still follow only the one, old rule for this.

"Antoine Auger-Giroux" <AntoineAugerGiroux@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
in message news:D37EF714-3DC7-41C8-B4E1-E962D85F1709@xxxxxxxxxxxxxxxx
> Thanks Roger,
>
> Question: Is there a way to define a default owner of folders and files in
> Windows 2000 ? Does Windows Server 2003 manage this the same way ?
>
> Our compagny has to be SOX compliance and this situation is causing us
> trouble.
>
> Thanks for the help !
>
> Antoine
>
> "Roger Abell [MVP]" wrote:
>
>> one must take away owner status to fully control NTFS permissions
>>
>> --
>> Roger Abell
>> Microsoft MVP (Windows Server : Security)
>>
>> "Antoine Auger-Giroux" <AntoineAugerGiroux@xxxxxxxxxxxxxxxxxxxxxxxxx>
>> wrote
>> in message news:A95C7E4A-1425-4ED2-BA01-315E61FD9389@xxxxxxxxxxxxxxxx
>> > Hi all,
>> >
>> > We have a windows 2000 file server
>> >
>> > We recently discover that a Folder Creator Owner could change the
>> > folder
>> > permission right. So all our security settings could be over pass by a
>> > owner
>> > who set it's own permission.
>> >
>> > question: Is there a way to prevent a Owner of a folder or a file to
>> > change
>> > the permissions of it ? So, still be the owner, but wihtout the
>> > permissions
>> > to change the security settings.
>> >
>> >
>> > Thanks
>> >
>> > Antoine Auger-Giroux
>>
>>
>>


.

Relevant Pages

  • Re: Object permissions
    ... Who is the owner of the query? ... permissions does the owner have on the underlying tables? ... does the user have on the query; ... to 'owners' in the sql statement each time the code runs, ...
    (microsoft.public.access.security)
  • Re: Permissions denied ifcfg-eth0
    ... network-functions because it wants to access ifcfg-eth0) ... Copy the EXACT error messages. ... is for the owner of the file. ... Further, processes running _as_root_ ignore permissions, because root is ...
    (alt.os.linux.redhat)
  • Re: NTFS folder permissions - Creator Owner issue (I think)
    ... From what you're telling me an owner has rights that cannot ... which seems to include the right to change permissions whether we ... >> the grant to Creator Owner becomes a real grant to the creator or the ...
    (microsoft.public.security)
  • Re: Control over creation of procs & views owned by dbo
    ... To add on to Jasper's response, you could also change object ownership to ... 'dbo' with sp_changeobjectowner. ... security context of the invoking user, not the object owner. ... need permissions on only directly referenced objects. ...
    (microsoft.public.sqlserver.security)
  • Re: Shared folder security tab...Windows 2003 server
    ... A user that creates a file/folder will be the owner of such and be able to ... change permissions on them even if they have no explicit permissions. ... security tab on all the client computers. ... While this worked for local folders ...
    (microsoft.public.windowsxp.security_admin)