|
Posted by Roger Abell [MVP] on December 21, 2007, 9:10 am
Please log in for more thread options
>
>> As the earlier posts indicate, a creator of an object in the 20th
>> century legacy Windows is its owner what same cannot be denied any power
>> over the object.
>>
>> Use of that power can be curtailed if the access is not local (ie. over
>> network share, or mediated by a web service, etc.).
>
> This is a network share and I thought I had curtailed her power by
> removing the Full Control right. What else must I do to prevent users
> from removing or modifying everyone else's rights to a folder or file?
>
If you have reduced all share level permissions to modify/change
at most, that should have done it.
>>
>> To "see" what is there use any software, like NTbackup, that uses the
>> backup and restore capabilities, run in context of an account with those
>> rights.
>>
>
> This is part of my concern, how do I know that our backups are complete?
> We use Backup Exec, when I look at the logs for that directory it shows it
> as empty. How do I know it's not just being blocked from backing up the
> files?
>
Back it up as an admin using the built-in ntbackup, and then
restore to alternate location without keeping permissions.
If it is empty and the backup log does not show errors, then
that directory is empty.
> Thanks,
> Linn
>
>> Roger
>>
>>> Hi,
>>>
>>> I have a user who was going into the security tap of folders in a public
>>> folder and turning off the inherit from parent checkbox and then
>>> selecting remove to block people from seeing her files. Kind of dumb
>>> since she could simply put the files in her home folder, but I digress.
>>>
>>> To stop this I took away everyone's full control rights which I assumed
>>> would work. It seems to have worked at some level, however, I found
>>> today that she created a subfolder and did the same thing. Looking into
>>> it now I see that everyone still has the rights to turn off inheritance
>>> on objects they own.
>>>
>>> I have three questions, is my observation correct, should a user without
>>> full control of a folder they own be able to turn off inheritance?
>>>
>>> If so, is it possible to stop this and how?
>>>
>>> Lastly, is there any way I can gain access to this folder without having
>>> her password or changing the ownership of the directory? Is it possible
>>> to give the administrator's account equivelent file rights of a user or
>>> group? I don't want to tip her hand yet that I'm on to her.
>>>
>>> Thanks in advance,
>>> Linn
>>>
>>>
>>
>>
>
>
| 
XML Sitemap