|
Home > Archive > 70-210 > January 2001 > Topic on Changing permission for a folder/file
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Topic on Changing permission for a folder/file
|
|
|
| Hi guys,
In the MCSE Training Kit Window Professional 2000 P.329, it mentions "To give administrators the ability to change permissions, assign Change Permissions to the Administrators group for the file or group."
But I have tried in my computer that it may not be necessary. When I use my administrator account to login, I can change any permission on any folder/file no matter the Change Permissions has been assigned to Administrators group.
Can anyone clarify on this point?
Thank You.
Thomas | |
|
| By default an NTFS volume has Full control for the Everyone group. So it's always good practice to remove the Full Control permission from the Everyone group, or remove the Everyone group from the folder altogether and only give your local user groups and the administrator group the NTFS permissions needed.
What they are trying to get at here is that you can give the Administrators group the ability to change permissions without giving them Full Control to the resource by only assigning the Administrators group "Change Permissions" to the folder.
In your case, double-check to make sure your permissions on the resources in question are set correctly. I'd bet either the Administrators group and/or the Everyone group has Full Control to the resources in question.
Hope this Helps!
Spid
Net+, MCSE | |
|
| Question. Does it really matter if you remove the Everyone, full control share permission or not? Assuming you have an NTFS volume. So if you just leave the default permission, no matter what NTFS permissions you set, the effective rights will always be the NTFS permissions. Because they are the most restrictive. It does make sense to remove it, but it's not necessary. | |
|
| Correct, when you combine share level and NTFS permissions, then it is the most restrictive. But we were just talking about the NTFS folder permissions, not share level or combining of the two. (Well I know I wasn't) 
When you create the NTFS volume, the default NTFS permission is Full Control for the Everyone Group. So now I create a folder called FOO on that volume, whammo, Everyone's got Full Control (NTFS permission) by default to the FOO folder.
Is it necessary to remove the Everyone Full Control NTFS permission, No, I never said it was, but it is a best practice in Microsoft's opinion.
Hope this Helps,
Spid
Net+, MCSE
[This message has been edited by Spid (edited 01-07-2001).] |
|
|
|
|