AlunBoyd
Guest
|
Posted:
Tue Nov 30, 2004 5:57 am Post subject:
Denying User "Change Permissions" On Local Folder |
|
|
It started as a simple request "create a local storage area for users, with
change rights only"
Setup: XP Pro SP1, NTFS, "Setup Security.inf" security template used to
provide baseline file system security.
Test: Created Folder C:\LocalUserData. Removed inhereted permissions. Set
Administrators & System to "F", set Users to "C". In advanced set users to
"Change Permissions" deny
The Problem: Non priv (local) test account can create a sub-folder (ok), but
they have change permissions on the new sub-folder and it's contents (not
wanted).
I cannot for the life of me get the darn thing to stop granting "Chg perm"
to the user. I've even tried blocking the creator/owner, but to no avail.
Is it : (a) I've missed something, (b) by design or (c) i'm going mad ?
--
Alun Boyd (UK) |
|