Folder permission

[Shingooooo]

Archived from groups: microsoft.public.win2000.security (More info?)

Creator owner cannot apply permission on this folder only
the folder had been remove inherit and copy all permisson to this folder
but when i change the creator owner only apply on this folder
i cant change that after i press ok,the setting will always return to original
what's happen

 

[Shingooooo]

Archived from groups: microsoft.public.win2000.security (More info?)

And i have a big question about creator owner
Creator Owner always can read and change permission and take ownership
although the creator owner account had been remove form the acl list


"Shingooooo" wrote:

> Creator owner cannot apply permission on this folder only
> the folder had been remove inherit and copy all permisson to this folder
> but when i change the creator owner only apply on this folder
> i cant change that after i press ok,the setting will always return to original
> what's happen

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Creator Owner normal use is to apply to things created within the place
where it is being granted, which is why you are seeing it default as it
does relative to its inheritance.
The Owner of an object always is able to do anything with the object,
regardless of the permissions on the object. However, they may first
need to grant themselves the specific permissions on the object in
order to actually use it without an access failure, but they always
can make that grant (to themselves or others).

--
Roger Abell
Microsoft MVP (Windows Security)

"Shingooooo" <Shingooooo@discussions.microsoft.com> wrote in message
news:C2BFD79D-01F4-4413-86DD-55AFFD9926C7@microsoft.com...
> Creator owner cannot apply permission on this folder only
> the folder had been remove inherit and copy all permisson to this folder
> but when i change the creator owner only apply on this folder
> i cant change that after i press ok,the setting will always return to
original
> what's happen

 

[Shingooooo]

Archived from groups: microsoft.public.win2000.security (More info?)

So can i block creator owner to change premission and take ownership


"Roger Abell" wrote:

> Creator Owner normal use is to apply to things created within the place
> where it is being granted, which is why you are seeing it default as it
> does relative to its inheritance.
> The Owner of an object always is able to do anything with the object,
> regardless of the permissions on the object. However, they may first
> need to grant themselves the specific permissions on the object in
> order to actually use it without an access failure, but they always
> can make that grant (to themselves or others).
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
>
> "Shingooooo" <Shingooooo@discussions.microsoft.com> wrote in message
> news:C2BFD79D-01F4-4413-86DD-55AFFD9926C7@microsoft.com...
> > Creator owner cannot apply permission on this folder only
> > the folder had been remove inherit and copy all permisson to this folder
> > but when i change the creator owner only apply on this folder
> > i cant change that after i press ok,the setting will always return to
> original
> > what's happen
>
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

To repeat:
The owner of an object will always be able to do anything with it.

The only way to prevent that individual from altering the permissions
of an object to to make them no longer the owner of it and set the
permissions so that take ownership and change permissions is not
granted to them.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Shingooooo" <Shingooooo@discussions.microsoft.com> wrote in message
news:B0254EE3-8CA5-499D-A2C0-923EE8BF7B33@microsoft.com...
> So can i block creator owner to change premission and take ownership
>
>
> "Roger Abell" wrote:
>
> > Creator Owner normal use is to apply to things created within the place
> > where it is being granted, which is why you are seeing it default as it
> > does relative to its inheritance.
> > The Owner of an object always is able to do anything with the object,
> > regardless of the permissions on the object. However, they may first
> > need to grant themselves the specific permissions on the object in
> > order to actually use it without an access failure, but they always
> > can make that grant (to themselves or others).
> >
> > --
> > Roger Abell
> > Microsoft MVP (Windows Security)
> >
> > "Shingooooo" <Shingooooo@discussions.microsoft.com> wrote in message
> > news:C2BFD79D-01F4-4413-86DD-55AFFD9926C7@microsoft.com...
> > > Creator owner cannot apply permission on this folder only
> > > the folder had been remove inherit and copy all permisson to this
folder
> > > but when i change the creator owner only apply on this folder
> > > i cant change that after i press ok,the setting will always return to
> > original
> > > what's happen
> >
> >
> >

 

[Shingooooo]

Archived from groups: microsoft.public.win2000.security (More info?)

ic thanks


"Roger Abell" wrote:

> To repeat:
> The owner of an object will always be able to do anything with it.
>
> The only way to prevent that individual from altering the permissions
> of an object to to make them no longer the owner of it and set the
> permissions so that take ownership and change permissions is not
> granted to them.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
> "Shingooooo" <Shingooooo@discussions.microsoft.com> wrote in message
> news:B0254EE3-8CA5-499D-A2C0-923EE8BF7B33@microsoft.com...
> > So can i block creator owner to change premission and take ownership
> >
> >
> > "Roger Abell" wrote:
> >
> > > Creator Owner normal use is to apply to things created within the place
> > > where it is being granted, which is why you are seeing it default as it
> > > does relative to its inheritance.
> > > The Owner of an object always is able to do anything with the object,
> > > regardless of the permissions on the object. However, they may first
> > > need to grant themselves the specific permissions on the object in
> > > order to actually use it without an access failure, but they always
> > > can make that grant (to themselves or others).
> > >
> > > --
> > > Roger Abell
> > > Microsoft MVP (Windows Security)
> > >
> > > "Shingooooo" <Shingooooo@discussions.microsoft.com> wrote in message
> > > news:C2BFD79D-01F4-4413-86DD-55AFFD9926C7@microsoft.com...
> > > > Creator owner cannot apply permission on this folder only
> > > > the folder had been remove inherit and copy all permisson to this
> folder
> > > > but when i change the creator owner only apply on this folder
> > > > i cant change that after i press ok,the setting will always return to
> > > original
> > > > what's happen
> > >
> > >
> > >
>
>
>