|
Posted by Roger Abell [MVP] on February 28, 2006, 8:25 am
If you were Registered and logged in, you could reply and use other advanced thread options
ownership. It has a default setting of Administrators. Any account
with that user right can always take ownership of anything. Even
if the Administrators group is removed so no account is listed as
having the user right the built-in Administrator (however renamed)
will always have the right.
>I have a folder that i want to make really secure as it has employee
> performence reviews in. I want to make this folder secure to the
> prying eyes of domain administrators ( i am a domain administrator
> myself).
>
> I have remove permission inheritance from the folder and granted full
> control permissions to those people who should be able to access the
> folder.
>
> I have created a user group that contains all the domain administrators
> who should not be able to snoop about and look at the performance
> reviews of others. I deny all permissions for this group on the
> folder. This includes a deny on the "Take Ownership" and "Change
> Permissions" permissions.
>
> I also change the folder owner to be me.
>
> I still find that the other domain administrators who are in the "deny"
> group can still take ownership of the folder and then change the
> permissions allowing themselves access to the files in the folder.
>
> Can anyone explain what is happening and how i may work arround this
> issue?
>
> Many Thanks
>
> Alex
>
| 
XML site map