Re: Don't Administrators have access to everything?

"Jim" wrote:

"John W." <JohnW@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:436D2692-154C-4B8E-8CC6-C79E5AF94621@xxxxxxxxxxxxxxxx
RESOLUTION achieved, sort of. After
(1) returning the folders to the Shared Documents folder,
(2) giving Users full control of the folders and files, and
(3) copying the folders back to where I wanted them,
I could edit the permissions to achieve the desired results
(well, almost): The Administrators accounts can access
the files and the Users cannot.

PUZZLE 1: If I MOVE the folders, they end up with
NO owner and no one has access to the files (not
even Administrator), but making a COPY applied
the correct inherited permissions. [Note that this
discovery invalidates one of my earlier contentions,
that "I already AM owner." Also, even though my
account had been granted Full Control, I didn't
actually get full control until I took ownership and
said Yes when asked if I wanted to also have full
control.]

PUZZLE 2: The Limited Account user cannot open
the files, but I really wanted to hide them from even
being seen by that user. I could not find a way to
accomplish that without also messing up the
Owner's and Administrators' permissions.

Puzzle 1: This may be the expected behaviour.
Puzzle 2: Do not allow limited users to read the folder.
Jim

1: Maybe so, but it doesn't flow logically from
my perspective. I'll let that one go as a MS quirk.
2: I left out the details of everything I tried,
simply summarizing with the statement "without
also messing up the Owner's and Administrators'
permissions." That was the first, and most
obvious, thing I tried. It also prevented me, the
owner, from seeing the files.
.

Relevant Pages

  • Explorer error with non-admin accounts
    ... >>that Explorer has caused an error and needs to restart. ... >give a share name.Also check the permissions, ... >administrators, instead, try to keep 1 or 2 ... I'm not talking about shared folders. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Log access or prevent access to private/confidential information.
    ... access to the data by asking the administrator to reset the password. ... File permissions won't help. ... >> I would like to be able to log access to my folders from the network. ... > In terms of preventing administrators or any others from accessing your ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Administrator/User security issues
    ... This "Users and Administrators can control the files." ... >> i have setup all the accounts, ... >> folders for testing the security. ... >> permissions but the admin. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP Folder Ownership Problems, Permissions, Inheritances
    ... I can change the ownership of all my root folders to "Administrators". ... " Permissions", "Inheritances", Users can have certain levels of security ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Permissions on a file server- how to reconcile sharing and securit
    ... I'm sharing various folders on a drive on the network, ... control under the sharing tab. ... NTFS permissions. ... write access on individual folders using security. ...
    (microsoft.public.windows.server.active_directory)