Re: Accessing folders owned by another user?


"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:OVWiSRKOIHA.5264@xxxxxxxxxxxxxxxxxxxxxxx
As the earlier posts indicate, a creator of an object in the 20th
century legacy Windows is its owner what same cannot be denied any power
over the object.

Use of that power can be curtailed if the access is not local (ie. over
network share, or mediated by a web service, etc.).

This is a network share and I thought I had curtailed her power by removing
the Full Control right. What else must I do to prevent users from removing
or modifying everyone else's rights to a folder or file?


To "see" what is there use any software, like NTbackup, that uses the
backup and restore capabilities, run in context of an account with those
rights.


This is part of my concern, how do I know that our backups are complete? We
use Backup Exec, when I look at the logs for that directory it shows it as
empty. How do I know it's not just being blocked from backing up the files?

Thanks,
Linn

Roger

"Linn Kubler" <lkubler@xxxxxxxxxxxxxxxxxx> wrote in message
news:OZ8dRhDOIHA.4948@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have a user who was going into the security tap of folders in a public
folder and turning off the inherit from parent checkbox and then
selecting remove to block people from seeing her files. Kind of dumb
since she could simply put the files in her home folder, but I digress.

To stop this I took away everyone's full control rights which I assumed
would work. It seems to have worked at some level, however, I found
today that she created a subfolder and did the same thing. Looking into
it now I see that everyone still has the rights to turn off inheritance
on objects they own.

I have three questions, is my observation correct, should a user without
full control of a folder they own be able to turn off inheritance?

If so, is it possible to stop this and how?

Lastly, is there any way I can gain access to this folder without having
her password or changing the ownership of the directory? Is it possible
to give the administrator's account equivelent file rights of a user or
group? I don't want to tip her hand yet that I'm on to her.

Thanks in advance,
Linn






.

Relevant Pages

  • Re: Accessing folders owned by another user?
    ... Use of that power can be curtailed if the access is not local (ie. over ... from removing or modifying everyone else's rights to a folder or file? ... We use Backup Exec, when I look at the logs for that directory it shows it ...
    (microsoft.public.windows.server.security)
  • Re: Accessing folders owned by another user?
    ... Use of that power can be curtailed if the access is not local (ie. over ... run in context of an account with those rights. ... could simply put the files in her home folder, ... I see that everyone still has the rights to turn off inheritance on ...
    (microsoft.public.windows.server.security)
  • Re: Accessing folders owned by another user?
    ... I have a user who was going into the security tap of folders in a public ... folder and turning off the inherit from parent checkbox and then selecting ... To stop this I took away everyone's full control rights which I assumed ... I see that everyone still has the rights to turn off inheritance on ...
    (microsoft.public.windows.server.security)
  • Accessing folders owned by another user?
    ... simply put the files in her home folder, ... To stop this I took away everyone's full control rights which I assumed ... see that everyone still has the rights to turn off inheritance on objects ...
    (microsoft.public.windows.server.security)
  • Re: Folders
    ... What I did was break the inheritance of all rights from the ... Then I started from the root to give rights again ... so now if I create a folder the folder is not automatically shared, ...
    (microsoft.public.security)