Re: NTFS , folder permissions ! Need Help

thank you for Replay ,
but i am still asking , is there no way to change that "Windows by default" ?

thanx

Steven L Umbach schrieb:
Windows by default gives the owner full control as you have seen. What you can do is to change the permissions for owner creator to be less than full control but as the owner the user can still always change permissions. Ultimately you would need to try to hide the security tab from the user [which can be done with Group Policy] which still could allow a user to use command line tools if he know how or remove ownership from that user. In Windows 2003 you can use the Explorer GUI to change ownership and for any NT operating system you can use command like tools like subinacl or fileacl if you are an administrator. --- Steve


"Saleh Matani" <saleh@xxxxxxxxxx> wrote in message news:OgMmh8UEGHA.1264@xxxxxxxxxxxxxxxxxxxxxxx

Hello,

Subject : File and Folder permissions for domain users

Network Directory : \\MyServer\MyDirectory\MyProject1
 \MyProject2
  ...........


Question :

How to give the domain user1 change permissions for folder "\MyProject1" and user1 use not to be able to take the full permissions for folders that he create under "\MyProject1"

with other words:
domain user1 has change permissions for folder "\MyProject1" , with this permissions he can create a new folder like for example "\MyProject1\New Folder\" after creating that folder is the user1 automatically the owner of that new created folder! means: he has all permissions! result --> user1 can give every one read ,write or full permissions for that folder.

is there any way to avoid that user1 can be able to give permissions for folders that he create under "\MyProject1\" directory ?


Thank you

Saleh Matani 



.

Relevant Pages

  • Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
    ... In order for Alice to Take Ownership of Bob's private folder she would ... Owner and now Bob no longer has the ability to set permissions on it. ... And Windows does have a umask-like function. ... This article contains a set of attack scenarios to demonstrate security ...
    (Full-Disclosure)
  • Re: User rights problem (Least Privilege)
    ... After giving write permission to Users group on Windows folder the ... >> I am managing a small network with Windows 2003 as DC and XP as clients. ... > inexperienced or limited user should ever have write permissions. ... > limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: networking with different groups
    ... >> desired access permissions for each shared disk and folder. ... >the permissions there is no way I can see USER1. ... It's your choice whether to create 6 individual user accounts or 2 ...
    (microsoft.public.windowsxp.network_web)
  • Re: Modify advanced permissions using wsh on W2K Server
    ... the checkbox that applies changes made to a folder to ... parameters it requires to accomplish your permissions changes. ... >> Two lines of your gifted experience with windows ... >> In the event you had not unchecked the daylight savings time box ...
    (microsoft.public.scripting.wsh)
  • Re: Password
    ... You don't assign passwords to files in Windows XP, ... In Windows Explorer, go to Tools, Folder Options, View and uncheck ... Here you can assign or deny permissions based on user name or user ...
    (microsoft.public.windowsxp.security_admin)