Re: Shared folder security tab...Windows 2003 server

If the user is not in the group shown as owner then they should not be able
to change permissions because they are not owner assuming they do not have
full control permissions. If they still can change permissions then I would
think that they are in the group shown as owner. Note that each file has an
owner.

To prevent the users from seeing the security tab for domain users create a
domain/OU level Group Policy that applies to the users you want this to
apply to. If you do not want your domain user account to be affected then
make sure your user account is not in the OU/container where the Group
Policy is applied or "filter" the GPO so that your user account or global
group that your account is in has deny permissions for apply for the GPO in
the GPO properties for security. --- Steve



"cyanide00" <cyanide00@xxxxxxxxx> wrote in message
news:1141057867.172198.274480@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Ok, so under owner in the properties/security/advanced/owner box there
is only domainname/administrator and domainname/administrators. The
user(s) name is not in there so they shouldn't be able to change their
own permissions right? Or would I have to remove these accounts? I'm
also sure that the user is not a part of the administrators group.

So lets say I just want to hide the security tab from the users. I
tried this once already and I couldn't get it to work. I probably did
it wrong. I went into the gpedit.msc, to edit the group policy, using
administrative templates. Then I obviously enable hide security tab
THOUGH this works, it doesn't work for a folder thats shared on the
network from the server. In other words if I log into the domain using
a supposed restricted user name, find the shared folder and right click
it I can still see the security tab and also change the permissions
even though this user did not create the folder. What am I missing? Is
there a way to add users to this group policy to restrict the security
tab (even if its shared) but allow my user name to still see the
security tab??? Any help would be much appreciated!

Thanks in advance...



.

Relevant Pages

  • Re: Shared folder security tab...Windows 2003 server
    ... A user that creates a file/folder will be the owner of such and be able to ... change permissions on them even if they have no explicit permissions. ... security tab on all the client computers. ... While this worked for local folders ...
    (microsoft.public.windowsxp.security_admin)
  • Re: NTFS folder permissions - Creator Owner issue (I think)
    ... > granted the permission to change permissions or denied it, ... I said that the owner of an object can change the object's permission ... >>> or folder, and view permissions. ...
    (microsoft.public.security)
  • Re: NTFS folder permissions - Creator Owner issue (I think)
    ... Are you aware that you can prevent permissions being given to the Creator ... Owner when they create a folder simply by removing the CREATOR OWNER access ... which seems to include the right to change permissions whether we ...
    (microsoft.public.security)
  • Re: Error Applying Security (Network Share)
    ... The owner of a folder can always change permissions to it even ... properties/security/advanced/owner and change owner to administrators. ... >I am experiencing a problem with permissions on a network share subfolder. ...
    (microsoft.public.windows.server.networking)
  • Re: NTFS folder permissions - Creator Owner issue (I think)
    ... From what you're telling me an owner has rights that cannot be ... which seems to include the right to change permissions whether we want ...
    (microsoft.public.security)