Security Permissions on Shared Folders
I have a resource server that serves a large number of users. We place all of our user accounts in groups based on their geographical location and organization function. We limit the permissions on folders to read/ srite, execute and delete. However, we do not give Full Control permissions. If a user creates a folder, is there anyway we can prevent that user or any other user (other than administrators) from changing or deleting security permissions on the folder?
Software/Hardware used:
Windows XP on a PC
Software/Hardware used:
Windows XP on a PC
ASKED:
June 7, 2011 8:02 PM
UPDATED:
June 8, 2011 1:18 PM
Answer Wiki:
Bydefault the creator of a file or folder also becomes the owner. However as an administrator you can change this so that the user is not the owner. Owners have high priv's as standard.
Once the user is not an owner you can set the permissions as you normally would.
This may all be moot though depending on what inherited (implicit) permissions apply to files/folders and what explicit (applied in the file/folder dacl) exist.
If you go into the scal you will find more fine grain persmissions you can set.
To see all answers submitted to the Answer Wiki: View Answer History.
RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
