Re: revoke change permissions?

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 03/10/04


Date: Wed, 10 Mar 2004 12:30:09 -0700

Not that I am aware of. However, there is a checkbox that can change
ownership of all folders and files to a certain user in the Owner tab of the
Security properties. Maybe this can help you with your issue?

-- 
Derek Melber
University of Phoenix Online
Faculty Candidate
dmelber@email.uophx.edu
"David Taylor" <mcp916removethis806@removethistoo@hotmail.com> wrote in
message news:uhQTi8sBEHA.2380@TK2MSFTNGP10.phx.gbl...
> Is there a way that I can cause ownership of files/folders to be assigned
to
> the Administrator Group instead of the user -- when it is the users who
will
> create the files???
>
> "Derek Melber [MVP]" <derekm@braincore.net> wrote in message
> news:uJoGNtsBEHA.4080@TK2MSFTNGP09.phx.gbl...
> > David,
> >
> > You can't use the Effective Permissions as the end all of the
> configuration.
> > It is wrong in many cases, especially when you start to use complex
group
> > structures.
> >
> > It sounds like you are correct in setting up Deny to Change Permissions
to
> > the group that should never have this ability. The only catch is to make
> > sure they don't have Ownership of the folder/file, since ownership gives
> > them the ability to do anything to the file.
> > Hopes this helps.
> >
> > -- 
> > Derek Melber
> > University of Phoenix Online
> > Faculty Candidate
> > dmelber@email.uophx.edu
> > "David Taylor 806@ hotmail.com>" <mcp916<removethisremovethistoo> wrote
in
> > message news:%23DPpzZsBEHA.3256@TK2MSFTNGP09.phx.gbl...
> > > I have a shared folder on a Windows 2003 server, and a Domain Local
> group
> > to
> > > which I will add groups of users.
> > >
> > > The domain local group has been given full control minus Change
> > > Atributes/Extended Attributes, take ownership, and Change Permissions.
> In
> > > addition, the Domain Local group has been assigned the Owner role.
> > >
> > > We do not want users playing with atributes or security settings.  The
> > > folder will hold files and folders created by and to be modified and
> > deleted
> > > by all members & group members of the new Domain Local group.
> > >
> > > When I view the Effective Permissions for the group, Change Permission
> is
> > > present.  I even tried denying it, removing the Creator/Owner, denying
> to
> > > creator owner and the group.
> > >
> > > Is there a proper way to make it so the users can access the files but
> not
> > > modify permissions?
> > >
> > > Thanks,
> > >
> > > David Taylor
> > >
> > >
> >
> >
>
>