Re: Remove ownership
- From: "Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx>
- Date: Thu, 31 May 2007 17:00:01 -0400
Actually no, when the object is written, the privilege is enabled and the original owner is written right with the rest of the Security Descriptor when the object (file, ad object, reg entry, whatever) is created. At no point, unless the backup system is poorly written should the person doing the restore be the owner, you want that to be as atomic as possible or else if there was a failure between the recreation of the object and the updating of the owner it would be set incorrectly.
Now you can take that permission and do extra things with it, like for instance, set a specific owner in the SD on an object that already exists.
--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net
---O'Reilly Active Directory Third Edition now available---
http://www.joeware.net/win/ad3e.htm
Paul Bergson [MVP-DS] wrote:
But it does hold security info. So once restore is complete all the ntfs permissions are back including the ownership. So during the initial creation the restore must be the owner and then this special permission you spoke of comes along and looks at the file/folder and restores the original ownership..
This is very cool if I understand you correctly.
- References:
- Remove ownership
- From: Rob Nicholson
- Re: Remove ownership
- From: Paul Bergson [MVP-DS]
- Re: Remove ownership
- From: Rob Nicholson
- Re: Remove ownership
- From: Paul Bergson [MVP-DS]
- Re: Remove ownership
- From: Joe Richards [MVP]
- Re: Remove ownership
- From: Paul Bergson [MVP-DS]
- Re: Remove ownership
- From: Joe Richards [MVP]
- Re: Remove ownership
- From: Paul Bergson [MVP-DS]
- Re: Remove ownership
- From: Joe Richards [MVP]
- Re: Remove ownership
- From: Paul Bergson [MVP-DS]
- Remove ownership
- Prev by Date: AD Domain Member workstation connections reported by netstat
- Next by Date: Re: Role based permissions
- Previous by thread: Re: Remove ownership
- Next by thread: Re: password prompt to be changed
- Index(es):
Relevant Pages
|