Re: Permissions



From what you have stated are the existing grants at the share
and the NTFS level, when you log into a different machine with
a machine local account, whether an admin on that machine or
not, then you should have no access whatsoever to the share.


"PL" <plecki2@xxxxxxxxxxx> wrote in message
news:saddb29v9uhvkfsa8kofcqdpl4222snm52@xxxxxxxxxx
I don't understand something... I have a file share on a server with
full control share permissions but limited NTFS permissions propagated
all the way down through the structure. NTFS permissions are full
control for administrators and system, read-only for domain users. It
mostly works as expected, however, why is it that when I log in to
another server within the same domain with only the local admin
account, I can edit all files within the share.

Thanks,
Pete


.



Relevant Pages

  • RE: Any way to remove ADMIN$ only?
    ... 2K and newer systems running NTFS 5 or greater). ... Share permissions ... Any way to remove ADMIN$ only? ... default security of Windows drives. ...
    (Focus-Microsoft)
  • RE: Any way to remove ADMIN$ only?
    ... Mixing the share permissions and the NTFS permissions generally cause ... which means more groups/people access the same shares. ... Along comes another admin that creates a share at a higher level in the ...
    (Focus-Microsoft)
  • RE: Any way to remove ADMIN$ only?
    ... method of setting permissions between share level and file level within the ... Any way to remove ADMIN$ only? ... 2K and newer systems running NTFS 5 or greater). ... applies default permissions to those shares it creates. ...
    (Focus-Microsoft)
  • Re: MS Knowledgebase Article 298345-Cant delete file...
    ... Logging in as admin is not that important with NTFS. ... What is important is the the NTFS permissions have ... no grant to Administrators and the owner is also not ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Any way to remove ADMIN$ only?
    ... every section had a bit devoted to "best practices". ... Any way to remove ADMIN$ only? ... 2K and newer systems running NTFS 5 or greater). ... applies default permissions to those shares it creates. ...
    (Focus-Microsoft)