Re: Shared folder security tab...Windows 2003 server

I am a network admin and I am trying to setup a file managment system.
We want to have 3 or 4 different user levels, example...one can delete,
add and modify files (but not folders), one can only execute and add
but not delete, one can only execute, and the last one has no access. I
started on the highest level first (delete, add and modify) and was
able to implement that, however I have the problem of the user being
able to right click and go into properties -> and then see the security
tab and modifying their own permissions. I tried using the group policy
editor to remove the security tab. While this worked for local folders
when actually being in the server shared folders when viewed on the
network are still showing the security tab. I tried everything...anyone
have any ideas I would appreciate it very much! Would I have to edit
each computer's registry trying to access the shared folder?


Don't worry about the Security tab itself-- that's just the graphical
interface. You actually need to restrict the permissions granted because 0
even if you lock out the Security tab, users could still use command-line
tools or other utilities to get in to the files.

Make sure that the user is not a member of a group that has "full control"
on the folder(s)


http://www.microsoft.com/technet/technetmag/issues/2005/11/HowITWorks...
http://www.microsoft.com/technet/technetmag/issues/2006/01/HowITWorks...

I acutally have that Magazine article in front of me...but it doesnt
talk about shared folder permissions. The user is not part of any group
with full control. The BIG problem is that once the user is in the
folder they can click any subfolder and manually change their own
permissions (under group or user names) under the security tab. How can
I stop this??? My solution was to hide the security tab because it
would stop anyone who wanted to easily right click and do this.

.

Relevant Pages

  • Re: Admin cannot change folder permissions
    ... attributes like read-only are not permissions. ... Security tab within the Properties of an NTFS object ... The read-only checkbox on folders is only a switch ... > in admin tools/services when I started rps so I could ...
    (microsoft.public.windowsxp.security_admin)
  • Re: maybea silly question
    ... App Data won't work. ... custom folder with permissions specifically set. ... and delete files and folders created by ... Member of the limited "Users" groups can create, modify, delete their own ...
    (microsoft.public.vb.general.discussion)
  • Re: File permissions on windows xp - home edition
    ... accessing the security tab on my NTFS System/OS partition I still can ... folders, because somehow the write prtoection is on for ALL these folders and ... I open to the security tab and changed the advanced security permissions for ... subfolders and files (i.e. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Please Read the Post: How to deny access to a folder in NTFS to a user ?
    ... Security tab on the properties of both folders and files. ... the deny access permission to explicitly exclude named users. ... >> independent drives not partioned drives. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: access denied when explorring some items
    ... also, after ok'ing the advisory box, security tab views. ... You will need to change the permissions ... XP does not share the user profile folders. ...
    (microsoft.public.windowsxp.general)