Re: Folder creator owner
- From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
- Date: Mon, 19 Dec 2005 17:17:00 -0700
I agree with you completely. It is on my list of things to bug (MS
about for the next generation).
Giving away ownership has always had some situations where it
just plain made specific containment scenarios impossible.
--
Roger Abell
Microsoft MVP (Windows Server : Security)
"Antoine Auger-Giroux" <AntoineAugerGiroux@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
in message news:3E0AF2E2-090A-4C6F-97D1-889B7553C54E@xxxxxxxxxxxxxxxx
> Thank's Joe and Roger,
>
> Roger: It would be great if it was include in further version of windows.
> When we had to manage security,SOX in mind , everything has to be very
> strait...
>
> Joe: Does Microsoft had a tool that can do that ? Or mabe a 3rd party tool
> ?
>
> Thank's again !
>
> Antoine
> ;)
>
> "Roger Abell [MVP]" wrote:
>
>> Joe has answered you. One must currently provide value-added
>> code to accomplish this, such as something the is notificed on new
>> NTFS object creation that then goes in a alters the Owner.
>> I have proposed years back that we need ability to make container
>> objects so that new objects either follow the existing rules, or have
>> owner value inherited from container object. Regretably all Windows
>> (NT family) versions still follow only the one, old rule for this.
>>
>> "Antoine Auger-Giroux" <AntoineAugerGiroux@xxxxxxxxxxxxxxxxxxxxxxxxx>
>> wrote
>> in message news:D37EF714-3DC7-41C8-B4E1-E962D85F1709@xxxxxxxxxxxxxxxx
>> > Thanks Roger,
>> >
>> > Question: Is there a way to define a default owner of folders and files
>> > in
>> > Windows 2000 ? Does Windows Server 2003 manage this the same way ?
>> >
>> > Our compagny has to be SOX compliance and this situation is causing us
>> > trouble.
>> >
>> > Thanks for the help !
>> >
>> > Antoine
>> >
>> > "Roger Abell [MVP]" wrote:
>> >
>> >> one must take away owner status to fully control NTFS permissions
>> >>
>> >> --
>> >> Roger Abell
>> >> Microsoft MVP (Windows Server : Security)
>> >>
>> >> "Antoine Auger-Giroux" <AntoineAugerGiroux@xxxxxxxxxxxxxxxxxxxxxxxxx>
>> >> wrote
>> >> in message news:A95C7E4A-1425-4ED2-BA01-315E61FD9389@xxxxxxxxxxxxxxxx
>> >> > Hi all,
>> >> >
>> >> > We have a windows 2000 file server
>> >> >
>> >> > We recently discover that a Folder Creator Owner could change the
>> >> > folder
>> >> > permission right. So all our security settings could be over pass by
>> >> > a
>> >> > owner
>> >> > who set it's own permission.
>> >> >
>> >> > question: Is there a way to prevent a Owner of a folder or a file to
>> >> > change
>> >> > the permissions of it ? So, still be the owner, but wihtout the
>> >> > permissions
>> >> > to change the security settings.
>> >> >
>> >> >
>> >> > Thanks
>> >> >
>> >> > Antoine Auger-Giroux
>> >>
>> >>
>> >>
>>
>>
>>
.
- References:
- Re: Folder creator owner
- From: Roger Abell [MVP]
- Re: Folder creator owner
- From: Antoine Auger-Giroux
- Re: Folder creator owner
- From: Roger Abell [MVP]
- Re: Folder creator owner
- From: Antoine Auger-Giroux
- Re: Folder creator owner
- Prev by Date: Re: AD-Fu a bit rusty so a small sec question
- Next by Date: Re: Folder creator owner
- Previous by thread: Re: Folder creator owner
- Next by thread: Re: Folder creator owner
- Index(es):
Relevant Pages
|
