prevent users from modifying permissions

Did you leave Creator/Owner in as Full Control? If so remove this user from all permissions. Unsure of any other solution without more details. Hope this helps.

Hi
Full permission for everyone on share is OK .
I set security permission on shared folders like you (RWXD) and also I remove "P" and "O" permissions. With these security permissions the users can create/save/open/delete folders or files but can't change permissions. Any new folder will copy automatically the permission from the parent folder. Maybe you modify the permissions of the parent folder after users create other subfolders. Try for one parent folder to use .
Now if your share is on a workstation where the user has admin rights you can't force these settings.
About everyone group, this can be a security issue. Recommended is to replace it in your permissions settings with Domain Users.

These permissions settings are OK. Verify again!

OK! Let?s try a dialogue. Post only comments!
You can see in owner tab who changed the permissions. This user is member of a special group?
Give me an example about permissions for a parent folder and a subfolder.

Thanks for trying again!
I've checked all the group's cumulative permissions and inheritance issues.
Here follows the setup:
The shared volume disk is named U:
Permissions on root of U: are:
Everyone: R
Domain Admins: F
System: F

The User1's homedir is named U:\user1
Everyone: R
Domain Admins: F
System: F
(all above inherited from parent)
User1: C (RWXD) (RWXD)
(added at creation of folder)

Now, if I log in as User1, create a subfolder U:\user1\test, it originally inherits the same perms as folder U:\user1
But, as User1, actually I can add permissions to other users, remove others and even upgrade my perms from C to F, or even delete all perms in the list, whereas theoretically I had no P permission there!
You may tryit and you'll see...

Take a look at ownership of the directories in question. An owner has full control (and can reset permissions) of a file or directory regardless of other permissions set unless a specific set of permissions are set up for the Creator/Owner user object.

Hi Tim,
Thanks for your reply.
I thought about that too: even if I set U:\user1 with the perms for Owner/Creator to C (RWXD, User1 (who is creator/owner of subdir U:\user1\test), I cannot limit his perms! User1 can still modify the perms on the subdir he creates.

My understanding was anyone who created a folder was automatically the owner. And the owner always has the rights to change the permissions.

Like the old scenario on NT training courses - A user leaves the company, you want to transfer their files to the replacement but have no permission to the folder, what do you do? Take ownership and reassign permissions.

Gavin

If you are using NT 4.0 you need to upgrade to SP6a if you havent' done that already.

After you are done with that step, you need to download the Microsoft Security Mangement Consol, a snap-in for MMC. After you install this it implements that file security features from Windows 2000. You will have greater flexability with these permissions, but warn you, make sure you set the inheritance property correctly, or you will be up all night manually resetting permissions.

This question was closed by the author