Re: Setting Permissions

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 08/01/02 

From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Thu, 1 Aug 2002 01:19:18 -0700

"Debra Earle" <theboss@intranet-works.com> wrote in message
news:3D48B880.BD3DE70A@intranet-works.com...
> Zorrina wrote:
> >
> > Can someone please help me with these problems related to
> > security. Thanks in advance for your help.
> >
> > 1) What are the permissions that should be set so that no
> > one but the owner of an object can access it?
>
> Anyone with administrator rights can always over-ride such a setting. But
> basically, give rights only to the owning account.
> >
> > 2) Suppose there are two different operating systems on
> > the same computer, how will the security settings
> > (permissions) of one affect the other (assuming that they
> > are both NT based operating systems say, Windows 2000 and
> > XP)?
>
> They will generally both respect those rights, but you may get "unknown"
> if you have an object with rights that relate to an account in one of the
> OS's but not the other.
>
> -- DE

In addition, on the last question:
Accesses granted using the so-called Well Known SIDs,
such as built-ins, Administrators, Users, etc. will be
recognized by either NT-family install. Any grants to
post-install defined principals (custom accounts or groups)
will only be recognized in the build where defined. 

--
Roger Abell
MS MVP (Windows Platform), MCSE, MCDBA
Associate Expert - Windows XP ExpertZone
http://www.microsoft.com/windowsxp/expertzone

Relevant Pages

  • Re: User Accounts
    ... account that surfs the web, and confining everything that comes down the ... Especially since folder permissions has less downside risk than filtering ... >every tool and feature in XP to lock down security as best as is possible. ... and settings do not stay the same when user account rights ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Accounts
    ... >every tool and feature in XP to lock down security as best as is possible. ... code that is exposed to the "outside", the higher the risk of exploit. ... If I limit an account in XP Home, it falls back to hiding paths, ... and settings do not stay the same when user account rights are ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cant Run Outlook Express
    ... No what MS means (and security gurus) is to not use the *hidden* ... administartor account while surfing the net. ... has a system or "hidden" administrator account that has full rights to all ...
    (microsoft.public.windowsxp.general)
  • Re: Permission
    ... I can see rights now. ... if OU has right security, some users in that OU which were in there don't ... > Your Test account should be there. ... >> Hmmm...I've never used the delegate priviledges for that purpose. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Setting Permissions
    ... Anyone with administrator rights can always over-ride such a setting. ... give rights only to the owning account. ... > 2) Suppose there are two different operating systems on ... how will the security settings ...
    (microsoft.public.windowsxp.security_admin)