|
Posted by Roger Abell [MVP] on August 24, 2006, 8:19 pm
If you were Registered and logged in, you could reply and use other advanced thread options
the correct spot ?? I am somewhat unsure whether you are
trying to define this on a reference XP system or in a GPO or
template. If reference system you want to look on the local
machine, not in AD. If you are defining in GPO or template
it does not matter where you find it as the SID is a well-known
SID that is the same everywhere. If you are working on a
DC then you must locate this by setting more conveniently by
setting the account object picker to work with Built-in principals
only (in the uppermost dropbox).
>I am working on hardening WinXP systems for the corporation I am
> employed with, and a certain security setting I am trying to implement
> designated that the CREATOR OWNER account is to have Full Access to
> subfolders and files only (file and folder permission/registry
> permission); however no matter what I have tried it will not allow me
> to add CREATOR OWNER stating it does not exist in the Domain (being
> tested in a lab setting first, which I know it exists as it shows up
> everywhere I look). I have implemented all other system security
> settings and hooked the machine up to an active environment to try it
> out, and it would allow me to add CREATOR OWNER from the live Domain,
> but does not allow me to change rights.
>
> I do have administrator access to make the changes, and this is the
> only issue I have encountered and wondered if anyone out there may have
> an idea as to what may be the cause behind this.
>
> Thanks for any assistance
>
| 
XML site map