Changing Creater Owner default permissions

We have a number of issues with users changing the permissions on their
files, although they do not have full control with the combined NTFS and
Share permissions due to the default OS permissions with the creator Owner
getting full control to the file they can remove system etc.

Does anyone know where these dafults are stored in the OS (Server 2003 /
2008) ?

There are a number of downsides to this and yes the best option would be to
educate the users better. However we would like to run some test with this
model to find if it is viable in production.

Any ideas welcome.

 

Please post this over to the windows.server.security newsgroup where it belongs

On the web:




--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

"fletcs" <fletcs@discussions.microsoft.com> wrote in message
news:F84651E9-C770-4847-9B59-1308AC3772E0@microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> We have a number of issues with users changing the permissions on their
> files, although they do not have full control with the combined NTFS and
> Share permissions due to the default OS permissions with the creator Owner
> getting full control to the file they can remove system etc.
>
> Does anyone know where these dafults are stored in the OS (Server 2003 /
> 2008) ?
>
> There are a number of downsides to this and yes the best option would be to
> educate the users better. However we would like to run some test with this
> model to find if it is viable in production.
>
> Any ideas welcome. <!--colorc--><!--/colorc-->