Re: Rights required to allow changing directory ownership?

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 08/31/05 

Date: Wed, 31 Aug 2005 06:39:33 -0700

I have not tested in a "change" owner scenario where the changing
account is not the current owner, but it may be that the user right
to Take ownership of objects is what is needed.
If that is the case, that there is no lesser way to allow your scenario,
then you likely would not want to grant this User right to helpdesk. 

-- 
Roger
"Joe Hegyi" <jhegyiATcenturysuretyDOTcom> wrote in message 
news:OckhLpZrFHA.3352@TK2MSFTNGP14.phx.gbl...
> 'm trying to use XCACLS.VBS to allow our help desk to change the owner on 
> a user's home directory when it is being created. The command I use is:
> cscript xcacls.vbs \\SERVER\users\USERID /T /S /E /O "DOMAIN\USERID"
>
> It works fine under my account, which has Domain Admin rights, but the 
> help desk techs get the following error when they run it:
>
> Error -2147024891: occurred in connecting to server. (Msg#3203)
> Error description: Access is denied.
>
> Operation Complete
> Elapsed Time: 5.859375E-02 seconds.
>
> Ending Script at 8/29/2005 4:10:32 PM
>
> They have full control on the directories. I've tried giving the help desk 
> group both "take ownership" and "restore files" user rights on the file 
> server, but it still doesn't work. Any ideas?
>
> Thanks,
> Joe
>

Relevant Pages

  • Re: Swen Virus
    ... used in an NNTP post by the owner, that he is getting swamped, as you are, ... and the poor sap is getting bounces back to his address ... from automated systems that don't care if it is a forgery. ... I have only sent three manual requests for confirmation from the account ...
    (microsoft.public.security.virus)
  • Re: User accounts
    ... Just copy over the ones you want to your own folder. ... "owner" folder (the system does not allow for renaming of the user account ... If your account is using the "jack" username folder, ... Windows help - www.rickrogers.org ...
    (microsoft.public.windowsxp.newusers)
  • Re: how to revoke owner rights in a directory or file ?
    ... To assign another person/account to be the "owner", ... be assigned with security permissions "Full Control". ... Those numbers are the SID of a deleted account. ...
    (microsoft.public.windows.server.sbs)
  • RE: Owner account question
    ... Your parents should have full control of Norton's from the Owner sign-on. ... > We have added any accounts, but an account has magically appeared. ... > Today I removed some spyware with the AOL spyware protection tool. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Forgotten bank accounts?
    ... A relative of mine deposited a few thousand into an account when her first ... government database, allowing them to see who has got what? ... I don't see how they can't easily find out who owns every bank account ... THe owner has become mentally incapacited. ...
    (uk.politics.misc)