Re: revoke change permissions?

From: David Taylor (mcp916removethis806_at_removethistoo@hotmail.com)
Date: 03/10/04 

Date: Wed, 10 Mar 2004 12:40:08 -0600

Is there a way that I can cause ownership of files/folders to be assigned to
the Administrator Group instead of the user -- when it is the users who will
create the files???

"Derek Melber [MVP]" <derekm@braincore.net> wrote in message
news:uJoGNtsBEHA.4080@TK2MSFTNGP09.phx.gbl...
> David,
>
> You can't use the Effective Permissions as the end all of the
configuration.
> It is wrong in many cases, especially when you start to use complex group
> structures.
>
> It sounds like you are correct in setting up Deny to Change Permissions to
> the group that should never have this ability. The only catch is to make
> sure they don't have Ownership of the folder/file, since ownership gives
> them the ability to do anything to the file.
> Hopes this helps.
>
> --
> Derek Melber
> University of Phoenix Online
> Faculty Candidate
> dmelber@email.uophx.edu
> "David Taylor 806@ hotmail.com>" <mcp916<removethisremovethistoo> wrote in
> message news:%23DPpzZsBEHA.3256@TK2MSFTNGP09.phx.gbl...
> > I have a shared folder on a Windows 2003 server, and a Domain Local
group
> to
> > which I will add groups of users.
> >
> > The domain local group has been given full control minus Change
> > Atributes/Extended Attributes, take ownership, and Change Permissions.
In
> > addition, the Domain Local group has been assigned the Owner role.
> >
> > We do not want users playing with atributes or security settings. The
> > folder will hold files and folders created by and to be modified and
> deleted
> > by all members & group members of the new Domain Local group.
> >
> > When I view the Effective Permissions for the group, Change Permission
is
> > present. I even tried denying it, removing the Creator/Owner, denying
to
> > creator owner and the group.
> >
> > Is there a proper way to make it so the users can access the files but
not
> > modify permissions?
> >
> > Thanks,
> >
> > David Taylor
> >
> >
>
>

Relevant Pages

  • Re: home folder management
    ... A convenient place to use the change permissions is to set it at ... > administrator can assume ownership of the file and reset permissions. ...
    (microsoft.public.windows.server.general)
  • Re: Access Denied
    ... To take ownership of a file or folder, ... > of the file then change permissions to delete the file. ...
    (microsoft.public.windowsxp.basics)
  • Re: Access Denied
    ... > To take ownership of a file or folder, ... >> already administrator then either change the permissions or take ... >> of the file then change permissions to delete the file. ...
    (microsoft.public.windowsxp.basics)
  • Re: NTFS deny permissions
    ... Whoever has "Change Permissions" can change the permissions of an object. ... allows them to seize ownership of a file. ... :>: Why are there deny permissions as well as allow permissions? ...
    (microsoft.public.inetserver.iis)
  • Re: Access to file denied
    ... You would need to logon as an administrator and if you still are not allowed access ... take ownership of the folder/file which will allow you to change permissions to grant ... To change ownership go to the ...
    (microsoft.public.win2000.security)
Loading