Re: Restricting Power Users to change permission

"w2ks" <w2ks@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:EC26A2DA-2AFA-4AF0-B399-79DB2F8F007B@xxxxxxxxxxxxxxxx
Thank you Roger.
I thought Power Users group has the permission to change permission
regardless whether they have the corresponding NTFS permission.

apparently i was wrong, and you clarified the problem.

thanks again for your solution. :)


No problem. As far as I know the only NTFS permission that
any account or group has without its being mentioned in the
actual NTFS permission is due to the User Right normally only
given to Administrators group to Take Ownership. In other
words, Power Users only have what the NTFS permissions
state, unless they have that user right granting them Take
Ownership.

Roger

"Roger Abell [MVP]" wrote:

All that I was meaning was the taking away the NTFS permissions
tab does not block changing of permissions, as they may likely know
of these utilities.

In this case, poster really should just not grant to begin with what
the group should not have. Then this is a non-problem.

Roger

"w2ks" <w2ks@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:319F41F7-E0B7-46E8-BB7A-A58E20ABADF9@xxxxxxxxxxxxxxxx
Roger,
i don't think i understand what you mean. i know cacls is the command
line
for setting up user permission from command prompt. Could you please
explain
a little more? :)

thank you

"Roger Abell [MVP]" wrote:

<charlie brown> wrote in message
news:%230b0ZkbgHHA.4596@xxxxxxxxxxxxxxxxxxxxxxx
Why don't you just remove the "Security" tab from Windows Explorer
via
GPO?


a power user would just drop to cmd line then, cacls, xcacls, etc.


"w2ks" <w2ks@xxxxxxxxxxxxxxxxxxxxxxxxx> schreef in bericht
news:71969EFF-FEA2-4E30-974A-163962136D1F@xxxxxxxxxxxxxxxx
Hi everyone,

I'm using win2000 sp4. Does anyone know how to restrict power users
group
to
change security permission on folders and files?

Any help would be appreciated.

thanks in advance :)












.

Relevant Pages

  • Re: Heddin shares restrections
    ... in the case of the power users i cant see all the tabs of ... the regional settings options, i appreciate your opinion ... some users need to install some ... the permission is Adobe acrobat reader. ...
    (microsoft.public.win2000.security)
  • Re: Unable to change message store location in Outlook Express
    ... to give Power Users full permission to make required changes. ... when I try to change the message store to an empty ... Once I log off and change my group membership to the Administrators Gp ...
    (microsoft.public.win2000.general)
  • Re: Restricting Power Users to change permission
    ... I thought Power Users group has the permission to change permission ... for setting up user permission from command prompt. ...
    (microsoft.public.windows.group_policy)
  • Re: Send on behalf: 2 names instead of 1
    ... >> Ask the Exchange administrator to give you Send As permission on the From ... >> Sue Mosher, Outlook MVP ... >> Administrators, Power Users, and Developers ...
    (microsoft.public.outlook.general)
  • Re: Send on Behalf not working? HELP!
    ... Dumb question, but you did add Send As permission on the correct mailbox, ... Administrators, Power Users, and Developers ...
    (microsoft.public.outlook.general)
Quantcast