Re: Accessing folders owned by another user?


"Linn Kubler" <lkubler@xxxxxxxxxxxxxxxxxx> wrote in message
news:%23aO5g2MPIHA.6036@xxxxxxxxxxxxxxxxxxxxxxx

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:OVWiSRKOIHA.5264@xxxxxxxxxxxxxxxxxxxxxxx
As the earlier posts indicate, a creator of an object in the 20th
century legacy Windows is its owner what same cannot be denied any power
over the object.

Use of that power can be curtailed if the access is not local (ie. over
network share, or mediated by a web service, etc.).

This is a network share and I thought I had curtailed her power by
removing the Full Control right. What else must I do to prevent users
from removing or modifying everyone else's rights to a folder or file?


If you have reduced all share level permissions to modify/change
at most, that should have done it.


To "see" what is there use any software, like NTbackup, that uses the
backup and restore capabilities, run in context of an account with those
rights.


This is part of my concern, how do I know that our backups are complete?
We use Backup Exec, when I look at the logs for that directory it shows it
as empty. How do I know it's not just being blocked from backing up the
files?


Back it up as an admin using the built-in ntbackup, and then
restore to alternate location without keeping permissions.
If it is empty and the backup log does not show errors, then
that directory is empty.


Thanks,
Linn

Roger

"Linn Kubler" <lkubler@xxxxxxxxxxxxxxxxxx> wrote in message
news:OZ8dRhDOIHA.4948@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have a user who was going into the security tap of folders in a public
folder and turning off the inherit from parent checkbox and then
selecting remove to block people from seeing her files. Kind of dumb
since she could simply put the files in her home folder, but I digress.

To stop this I took away everyone's full control rights which I assumed
would work. It seems to have worked at some level, however, I found
today that she created a subfolder and did the same thing. Looking into
it now I see that everyone still has the rights to turn off inheritance
on objects they own.

I have three questions, is my observation correct, should a user without
full control of a folder they own be able to turn off inheritance?

If so, is it possible to stop this and how?

Lastly, is there any way I can gain access to this folder without having
her password or changing the ownership of the directory? Is it possible
to give the administrator's account equivelent file rights of a user or
group? I don't want to tip her hand yet that I'm on to her.

Thanks in advance,
Linn








.

Relevant Pages

  • Re: Accessing folders owned by another user?
    ... Use of that power can be curtailed if the access is not local (ie. over ... or modifying everyone else's rights to a folder or file? ... folder and turning off the inherit from parent checkbox and then ... it now I see that everyone still has the rights to turn off inheritance ...
    (microsoft.public.windows.server.security)
  • Re: Accessing folders owned by another user?
    ... Use of that power can be curtailed if the access is not local (ie. over ... run in context of an account with those rights. ... could simply put the files in her home folder, ... I see that everyone still has the rights to turn off inheritance on ...
    (microsoft.public.windows.server.security)
  • Re: Backing up public folders
    ... This is a problem if the owner of a folder ... >restricts the rights of the folder. ... This backup user is the same one we use to backup the mailboxes ... If the folder owner doesn't want to play ball then it's his tough luck ...
    (microsoft.public.exchange.admin)
  • Re: How to automate ASR restore process
    ... Setting up the RIS server to use ASR ... folder on the RIS server, ... make a backup copy of each .osc file before you ...
    (microsoft.public.windows.server.general)
  • Re: DC v Heller: Amicus Brief of the Real Linguists, Part I
    ... many "classes" of people who have forfeited their rights. ... a well-regulated militia, when such a person would be FOUR WAYS ... GUARANTEED by the Constitution! ... share in the power and rights of the whole, ...
    (talk.politics.guns)