Re: How to make the file undeleteable

You can apply NTFS permissions programmatically quite easily. Do a google 
search, but there are all sorts of APIs for doing this. The ADSI or WMI 
interfaces (which are very easy to use from VB/C#) are your best bet.

In your case the best method is to create a special user-account and set the 
permissions on the file so that only that particular user can delete the 
file - i.e. admins/other users are forbidden from deleting the file, they 
can only read/write it.

You can theoretically perform hacks in kernel-mode using drivers which block 
requests to delete the file (think Sony Rootkit fiasco), but an admin with 
the right skills could also perform his own hacks to bypass your hacks...in 
the end you have to shrug your shoulders and accept that it is not possible 
to achieve things this way.

My advise is to do things the proper, simple way with NTFS permissions. 
Anything beyond this requires huge amounts of effort and will ultimately be 
defeated. If someone really wants to delete your file they will - I know I 
certainly could.

James

-- 
Microsoft MVP - Windows SDK
www.catch22.net
Free Win32 Source and Tutorials


"cjs_pro" <cjspro@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message 
news:3FD3BA83-3BE6-44B6-BB82-5FFC03B42F39@xxxxxxxxxxxxxxxx
>I need to programmatically make the file undeleteable, even by an
> administrator unless the user re-formats all diskspace.
>
> Thanks
>
>
>
> "James Brown" wrote:
>
>> set the NTFS permissions on the file so that only administrators
>> have delete access.
>>
>> James
>>
>> -- 
>> Microsoft MVP - Windows SDK
>> www.catch22.net
>> Free Win32 Source and Tutorials
>>
>>
>> "jcs_pro" <jcs_pro@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:5911F61D-6241-433F-87F2-C60429722809@xxxxxxxxxxxxxxxx
>> > Hi,
>> >
>> > My project requires a configuration file undeleteable by a user on a
>> > Windows
>> > system. I'm wondering if any simple way to achieve it.
>> >
>> > Thanks
>>
>>
>> 


.

Relevant Pages

  • Re: How to make the file undeleteable
    ... > My advise is to do things the proper, simple way with NTFS permissions. ... >> "James Brown" wrote: ... >>> Microsoft MVP - Windows SDK ... >>> Free Win32 Source and Tutorials ...
    (microsoft.public.vc.language)
  • Re: Lockdown
    ... There are a couple things you can do assuming users do not have administrator rights. ... member] deny ntfs permissions or not having any allow permissions to a application ... folder or file you can prevent the user from running that application or saving to a ... To restrict users to a certain website, you need to have your firewall ...
    (microsoft.public.win2000.security)
  • Re: Windows XP Pro Login
    ... Our consulting company ... I can perform basic network administration only. ... Where do I find the NTFS permissions, ... >> they are able to connect to our shared drive as if they had ADMINISTRATOR ...
    (microsoft.public.exchange.admin)
  • Re: File Security
    ... system if you are using ntfs permissions. ... the laptop can be physically secured 100 percent of the time. ... administrator password and get access to all files. ... Private keys for user and ...
    (microsoft.public.win2000.security)
  • Re: Folder Ownership
    ... Can you list out the NTFS permissions at cmd prompt ... I tried it from a long in session; ... as administrator his name does not appear at all only ... Trying to give a user the "take ownership" of his own folder on his ...
    (microsoft.public.win2000.security)
Loading