Re: NTFS Permission



Martin

You say you have set a Deny Delete for "the user".
Evidently that means the account of the user in Domain A?
Are these domains within one forest? Are these trusting if
not within one forest?
Have you set any auditing on the files in order to see what
account is actually being used during the delete ?

Roger

"Martin" <hasnews@xxxxxxxxxxx> wrote in message
news:1145867696.156977.93750@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
The user has an account on the domain A as a domain user.
His PC is in the Domain A.
His nootebook is not in the domain A but he has the same init and the
same password.
The user has access with his notebook on the files over a share with
his init and password. The share is set manually with the explorer.

The file inherits the permission from the folder (Administrators:Full;
Domain users Full)
The Owner of the file is another user.
The file permission for the user are set to read, read / execute.

Now I set as Administrator "Delete denied" for the user.

The user can delete the File!

Regards
Martin



.



Relevant Pages

  • NTFS Permission
    ... The user has an account on the domain A as a domain user. ... His nootebook is not in the domain A but he has the same init and the ... The file permission for the user are set to read, ...
    (microsoft.public.windows.server.security)
  • Re: SMS Across 2 Forests
    ... I will now need> to place a primary site server with default MP in my other forest. ... Will I> be ok with one SLP in my central site even though it exist in the other> forest? ... >>> - What kind of user account do I need to specify for the address ... >>> in both forests and used that as my client push installation account. ...
    (microsoft.public.sms.setup)
  • Re: Cannot Move Mailboxes - RESOLVED
    ... the E2K3 box ir perhaps it's account in AD was corrupt. ... re-running forest prep and domain prep and re-joining ... adds the Exchange security principles to the AD domain, ...
    (microsoft.public.exchange.admin)
  • Re: Trust iand different forests
    ... When creating an external trust between a win2003 forest and a win2000 ... Express or any other newsreader), and configure a news account, pointing ... This is a direct link to the Microsoft Public ...
    (microsoft.public.win2000.active_directory)
  • Re: Seperate forests associate with external account
    ... "Protecting the world from PSTs and brick backups!" ... migrate the account to forest A then import the .pst will users lose all ... then disable user account in A, and in the mailbox rights grant the user ...
    (microsoft.public.exchange.admin)