General discussion

Locked

"Grant" Ownership of a folder?

By Able-Admin ·
I've installed a database program under the domain administrator account onto a workstation. Now whenever that user tries to access the database, they get an error. However when I give them administrative rights, they have no problem.

I'm assuming that the "cannot access other users files" caveat of the powerusers group is what is causing this error. Therefor if I make that user the "owner" of that particular files folder and contents that should fix the problem correct?

Problem is, I can only find info and how to "take" ownership as an administrator would.

Any ideas?

Thanks for your time,

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

"Grant" Ownership of a folder?

by BeerMonster In reply to "Grant" Ownership of a fo ...

HI,
Not being able to 'give' ownership to someone else is a key part of NT\win2k\xp security. The idea is that an admin or other unscrupulous user cannot take ownership of a file or folder, grant themselves access to it, then give the ownership back when they had finished. The fact that ownership would from that point belong to them means that there is a 'paper' trail that indicates what has gone on. Your users should not need ownership of a folder or file to access it anyway, as long as you have granted them permissions on the folder or file via the properties \ security tab of the file or folder in question. This also cannot be an account issue - whereby the app is set to run only under the admin account, because making your user a member of the admins group would not fix this.

What you could try is downloading regmon and filemon from sysinternals.com - which will give the result of all attempted file and registry access attempts including whether or not access was denied. run regmon while logged in as admin, then use runas (highlight the app, hold down ctrl and shift then right click) to run the problem app as the user. Once the error appears, scan the output of regmon for access denied messages to see where the access is being blocked. Next do the same thing with filemon. Once you have correctly set permissions on any file or registry areas that are flagged as problems, you should be ok. Hope this helps...

Collapse -

"Grant" Ownership of a folder?

by Able-Admin In reply to "Grant" Ownership of a fo ...

Wow! haven't tried it yet, but that was such a well thought out answer I have to give you the points! Thank You very much

Collapse -

"Grant" Ownership of a folder?

by Able-Admin In reply to "Grant" Ownership of a fo ...

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums