Re: Folder creator owner

I agree with you completely. It is on my list of things to bug (MS
about for the next generation).

Giving away ownership has always had some situations where it
just plain made specific containment scenarios impossible.

--
Roger Abell
Microsoft MVP (Windows Server : Security)

"Antoine Auger-Giroux" <AntoineAugerGiroux@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote
in message news:3E0AF2E2-090A-4C6F-97D1-889B7553C54E@xxxxxxxxxxxxxxxx
> Thank's Joe and Roger,
>
> Roger: It would be great if it was include in further version of windows.
> When we had to manage security,SOX in mind , everything has to be very
> strait...
>
> Joe: Does Microsoft had a tool that can do that ? Or mabe a 3rd party tool
> ?
>
> Thank's again !
>
> Antoine
> ;)
>
> "Roger Abell [MVP]" wrote:
>
>> Joe has answered you. One must currently provide value-added
>> code to accomplish this, such as something the is notificed on new
>> NTFS object creation that then goes in a alters the Owner.
>> I have proposed years back that we need ability to make container
>> objects so that new objects either follow the existing rules, or have
>> owner value inherited from container object. Regretably all Windows
>> (NT family) versions still follow only the one, old rule for this.
>>
>> "Antoine Auger-Giroux" <AntoineAugerGiroux@xxxxxxxxxxxxxxxxxxxxxxxxx>
>> wrote
>> in message news:D37EF714-3DC7-41C8-B4E1-E962D85F1709@xxxxxxxxxxxxxxxx
>> > Thanks Roger,
>> >
>> > Question: Is there a way to define a default owner of folders and files
>> > in
>> > Windows 2000 ? Does Windows Server 2003 manage this the same way ?
>> >
>> > Our compagny has to be SOX compliance and this situation is causing us
>> > trouble.
>> >
>> > Thanks for the help !
>> >
>> > Antoine
>> >
>> > "Roger Abell [MVP]" wrote:
>> >
>> >> one must take away owner status to fully control NTFS permissions
>> >>
>> >> --
>> >> Roger Abell
>> >> Microsoft MVP (Windows Server : Security)
>> >>
>> >> "Antoine Auger-Giroux" <AntoineAugerGiroux@xxxxxxxxxxxxxxxxxxxxxxxxx>
>> >> wrote
>> >> in message news:A95C7E4A-1425-4ED2-BA01-315E61FD9389@xxxxxxxxxxxxxxxx
>> >> > Hi all,
>> >> >
>> >> > We have a windows 2000 file server
>> >> >
>> >> > We recently discover that a Folder Creator Owner could change the
>> >> > folder
>> >> > permission right. So all our security settings could be over pass by
>> >> > a
>> >> > owner
>> >> > who set it's own permission.
>> >> >
>> >> > question: Is there a way to prevent a Owner of a folder or a file to
>> >> > change
>> >> > the permissions of it ? So, still be the owner, but wihtout the
>> >> > permissions
>> >> > to change the security settings.
>> >> >
>> >> >
>> >> > Thanks
>> >> >
>> >> > Antoine Auger-Giroux
>> >>
>> >>
>> >>
>>
>>
>>


.

Relevant Pages

  • Re: Drawing on DC
    ... can you finally say me about a good guide to Windows ... for drawing in OnMouseMove is that the mouse is captured and the window ... The strokes are going into the container where it counts. ...
    (microsoft.public.vc.mfc)
  • Re: Folder creator owner
    ... Thank's Joe and Roger, ... Roger: It would be great if it was include in further version of windows. ... > NTFS object creation that then goes in a alters the Owner. ...
    (microsoft.public.win2000.security)
  • Re: File sharing passwords
    ... I am appreciate what Roger had provided. ... account and password on the shared PC to access the shared ... Windows XP home edition seems not to provide ... FILES/DIRS SHARING IN WINDOWS XP HOME EDITION. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Is my diagnosis correct?
    ... Associate Expert - WindowsXP Expert Zone ... Windows help - www.rickrogers.org ... >> When it crashes the next boot reports a disc boot system failure, ...
    (microsoft.public.windowsxp.newusers)
  • Re: IIS Guru Help Please
    ... > Windows .Net server public preview release. ... > IIS 5 of W2k. ... > Roger Abell ...
    (microsoft.public.windowsxp.security_admin)