Re: Folder creator owner

Thank's Joe and Roger,

Roger: It would be great if it was include in further version of windows.
When we had to manage security,SOX in mind , everything has to be very
strait...

Joe: Does Microsoft had a tool that can do that ? Or mabe a 3rd party tool ?

Thank's again !

Antoine
;)

"Roger Abell [MVP]" wrote:

> Joe has answered you. One must currently provide value-added
> code to accomplish this, such as something the is notificed on new
> NTFS object creation that then goes in a alters the Owner.
> I have proposed years back that we need ability to make container
> objects so that new objects either follow the existing rules, or have
> owner value inherited from container object. Regretably all Windows
> (NT family) versions still follow only the one, old rule for this.
>
> "Antoine Auger-Giroux" <AntoineAugerGiroux@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
> in message news:D37EF714-3DC7-41C8-B4E1-E962D85F1709@xxxxxxxxxxxxxxxx
> > Thanks Roger,
> >
> > Question: Is there a way to define a default owner of folders and files in
> > Windows 2000 ? Does Windows Server 2003 manage this the same way ?
> >
> > Our compagny has to be SOX compliance and this situation is causing us
> > trouble.
> >
> > Thanks for the help !
> >
> > Antoine
> >
> > "Roger Abell [MVP]" wrote:
> >
> >> one must take away owner status to fully control NTFS permissions
> >>
> >> --
> >> Roger Abell
> >> Microsoft MVP (Windows Server : Security)
> >>
> >> "Antoine Auger-Giroux" <AntoineAugerGiroux@xxxxxxxxxxxxxxxxxxxxxxxxx>
> >> wrote
> >> in message news:A95C7E4A-1425-4ED2-BA01-315E61FD9389@xxxxxxxxxxxxxxxx
> >> > Hi all,
> >> >
> >> > We have a windows 2000 file server
> >> >
> >> > We recently discover that a Folder Creator Owner could change the
> >> > folder
> >> > permission right. So all our security settings could be over pass by a
> >> > owner
> >> > who set it's own permission.
> >> >
> >> > question: Is there a way to prevent a Owner of a folder or a file to
> >> > change
> >> > the permissions of it ? So, still be the owner, but wihtout the
> >> > permissions
> >> > to change the security settings.
> >> >
> >> >
> >> > Thanks
> >> >
> >> > Antoine Auger-Giroux
> >>
> >>
> >>
>
>
>
.

Relevant Pages

  • Re: Folder creator owner
    ... Microsoft MVP (Windows Server: Security) ... > Thank's Joe and Roger, ... > Joe: Does Microsoft had a tool that can do that? ... >> owner value inherited from container object. ...
    (microsoft.public.win2000.security)
  • Re: NTFS folder permissions - Creator Owner issue (I think)
    ... not change the account that in Owner from having implicit Write_DAC. ... what I want is the ability to set a flag on a container object. ... Without the flag set everything behaves as it does now, ... Roger ...
    (microsoft.public.security)
  • Re: NTFS folder permissions - Creator Owner issue (I think)
    ... Paul ... >> Roger, ... > not change the account that in Owner from having implicit Write_DAC. ... > flag set then upon create of a new contained object the owner attribute ...
    (microsoft.public.security)
  • Re: SECOND HAND PURCHASE OF COMPUTER WITH XP
    ... >owner did relinquish all of the software to you and stop ... >CD and installation key and the main thing. ... >Roger Abell ... >> I have recntly purchased second hand a medion computer ...
    (microsoft.public.windowsxp.security_admin)
  • Re: OT: Traffic Light Sequencer
    ... The owner, Roger, is kind of like a Great guy ... Kind of like SteveYoung from Pinball Resource only on happy ... >> www.crowriver.com Roger has the complete unit if I remember right. ...
    (rec.games.pinball)