|
Posted by Roger Abell [MVP] on November 17, 2005, 3:06 pm
Please log in for more thread options
Actually, by default the creator does not get all permissions,
but instead is made the Owner. The Owner then has the
ability to grant to themselves any and/or all permissions.
However, unless the container from which a new object
inherits its initial permissions specify with Creator Owner
or Creator Group then the Owner does not by default get
any grant of explicit permissions.
By default in Windows 2000/XP/2003 may files and registry keys have an
explicitly configured permissions for CREATOR/OWNER which is always
"Full control".
Like this:
CREATOR/OWNER Full Control
Administrators Full Control
System Full Control
Why bother to add a spécial permission for CREATOR/OWNER when by
design CREATOR has always all permissions on its own files?
What would happen if we remove thes permissions on NTFS volumes and in
Registry?
| 
XML Sitemap