|
Posted by acchong on November 30, 2006, 4:44 pm
Please log in for more thread options
Is the account that you use for testing a member of local administrator
or domain admin group. If a user is a member of local administrator and
domain admin group, he will still be able to read permission even if
you had set deny read permission for his account on the folder.
> Hi,
>
> I am not sure if this is a bug or I am overlooking something. I am
> finding this inconsistence in the NTFS permission on my file server.
>
> I have a share folder on my file server and all folders underneath it
> inherits permission from this parent folder. I assigned a group (just
> call is user_group for the time being) with modify NTFS permssion
> (disabled read permission) on this folder and also disabled read
> permissions, change permissions and take ownership for the creator owner
> group on this folder. The users\domain entry was also removed from the
> ACL. I logged in using one of the member account in the user_group and
> created a folder in the share folder. When I looked the the NTFS
> permission from that workstation (which I should not be able to do as I
> took out the read permission from both the creator owner and user_group
> entries), both the creator owner and user_group shows read permission,
> change permission and take ownership being disabled. Although I was not
> able to change permission and take owenership, I was able to read the
> NTFS permission. I checked the effive permission setting of that user
> account and shows that it has full permission.
>
> Do someone experience similar problem before? My intention is to setup a
> share folder so that users can not change/read permission and take
> ownership even they are the folder owner.
>
> Thanks
| 
XML Sitemap