General discussion

Locked

Server Folder Access / Security

By calans ·
We have a sub-folder on one of our NT servers that we want to isolate to just 3 people. I've tried many options but can't get it the way I'd like. The problem is that it seems that an unauthorized user can still overide the settings and can get into the folder by right-clicking the unaccessed folder and resetting the permissions, upon which he can then get in.

How can I make sure any unauthorized user can't somehow takeover the settings (even though they don't have administrative rights) whether it be changing permissions or by taking ownership

Thanks

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Server Folder Access / Security

by Antsoair In reply to Server Folder Access / Se ...

I ran into something similar. If a user has local admin authority on the server then they can change the NTFS permissions from their workstation. However that same person could not change the share permission for the folder. The first thing I would do is check the local admin group and verify who is a member of that group. The best thing would be to restrict that group. If you can't then control access through the share. Since access through a share is the most restrictive between the NTFS permission and the share permission you should set up the share to control access.

The only problem to this is that these users could log onto the server locally if they have local admin privileges and then change the share permission at the server.

Collapse -

Server Folder Access / Security

by calans In reply to Server Folder Access / Se ...

Poster rated this answer

Collapse -

Server Folder Access / Security

by Soekratis In reply to Server Folder Access / Se ...

Try this out..

First, make sure that the user/users do not belongs to the "Administrators" group.

Second, run the "User Manager for Domain" and go to "Policies-User Rights". Scroll down the "Right" drop down menu and select the last item which is "Take ownership of files and other objects". Make sure that only the "Administrators" Group are granted this rights.

regards
Soekratis

Collapse -

Server Folder Access / Security

by calans In reply to Server Folder Access / Se ...

Poster rated this answer

Collapse -

Server Folder Access / Security

by calans In reply to Server Folder Access / Se ...

This question was closed by the author

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums