Re: Shared folder security tab...Windows 2003 server
- From: "Colin Nash [MVP]" <cnashx@xxxxxxxxx>
- Date: Fri, 24 Feb 2006 18:28:16 -0500
"cyanide00" <cyanide00@xxxxxxxxx> wrote in message
news:1140804615.726179.288300@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I am a network admin and I am trying to setup a file managment system.
We want to have 3 or 4 different user levels, example...one can delete,
add and modify files (but not folders), one can only execute and add
but not delete, one can only execute, and the last one has no access. I
started on the highest level first (delete, add and modify) and was
able to implement that, however I have the problem of the user being
able to right click and go into properties -> and then see the security
tab and modifying their own permissions. I tried using the group policy
editor to remove the security tab. While this worked for local folders
when actually being in the server shared folders when viewed on the
network are still showing the security tab. I tried everything...anyone
have any ideas I would appreciate it very much! Would I have to edit
each computer's registry trying to access the shared folder?
Don't worry about the Security tab itself-- that's just the graphical
interface. You actually need to restrict the permissions granted because
even if you lock out the Security tab, users could still use command-line
tools or other utilities to get in to the files.
Make sure that the user is not a member of a group that has "full control"
on the folder(s)
http://www.microsoft.com/technet/technetmag/issues/2005/11/HowITWorksNTFS/
http://www.microsoft.com/technet/technetmag/issues/2006/01/HowITWorksNTFS/
--
Colin Nash
Microsoft MVP
Windows Shell/User
.
- Follow-Ups:
- Re: Shared folder security tab...Windows 2003 server
- From: cyanide00
- Re: Shared folder security tab...Windows 2003 server
- References:
- Shared folder security tab...Windows 2003 server
- From: cyanide00
- Shared folder security tab...Windows 2003 server
- Prev by Date: Securing against an internet based intrusion
- Next by Date: Re: Securing against an internet based intrusion
- Previous by thread: Shared folder security tab...Windows 2003 server
- Next by thread: Re: Shared folder security tab...Windows 2003 server
- Index(es):
Relevant Pages
|