Re: revoke change permissions?
From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: Wed, 10 Mar 2004 12:30:09 -0700
Not that I am aware of. However, there is a checkbox that can change
ownership of all folders and files to a certain user in the Owner tab of the
Security properties. Maybe this can help you with your issue?
-- Derek Melber University of Phoenix Online Faculty Candidate email@example.com "David Taylor" <mcp916removethis806@firstname.lastname@example.org> wrote in message news:uhQTi8sBEHA.2380@TK2MSFTNGP10.phx.gbl... > Is there a way that I can cause ownership of files/folders to be assigned to > the Administrator Group instead of the user -- when it is the users who will > create the files??? > > "Derek Melber [MVP]" <email@example.com> wrote in message > news:uJoGNtsBEHA.4080@TK2MSFTNGP09.phx.gbl... > > David, > > > > You can't use the Effective Permissions as the end all of the > configuration. > > It is wrong in many cases, especially when you start to use complex group > > structures. > > > > It sounds like you are correct in setting up Deny to Change Permissions to > > the group that should never have this ability. The only catch is to make > > sure they don't have Ownership of the folder/file, since ownership gives > > them the ability to do anything to the file. > > Hopes this helps. > > > > -- > > Derek Melber > > University of Phoenix Online > > Faculty Candidate > > firstname.lastname@example.org > > "David Taylor 806@ hotmail.com>" <mcp916<removethisremovethistoo> wrote in > > message news:%23DPpzZsBEHA.3256@TK2MSFTNGP09.phx.gbl... > > > I have a shared folder on a Windows 2003 server, and a Domain Local > group > > to > > > which I will add groups of users. > > > > > > The domain local group has been given full control minus Change > > > Atributes/Extended Attributes, take ownership, and Change Permissions. > In > > > addition, the Domain Local group has been assigned the Owner role. > > > > > > We do not want users playing with atributes or security settings. The > > > folder will hold files and folders created by and to be modified and > > deleted > > > by all members & group members of the new Domain Local group. > > > > > > When I view the Effective Permissions for the group, Change Permission > is > > > present. I even tried denying it, removing the Creator/Owner, denying > to > > > creator owner and the group. > > > > > > Is there a proper way to make it so the users can access the files but > not > > > modify permissions? > > > > > > Thanks, > > > > > > David Taylor > > > > > > > > > > > >