RE: shared Folder permissions - No Read/Write Access for Admins



AE,

In order to make changes ont his file, you will need to take ownerwhip of
the file and temporarilly grant the managing account permissions over the
file or folder.

Directions:
http://technet2.microsoft.com/windowsserver/en/library/6f097abe-d1d9-4d16-93c5-7326aa1f33791033.mspx?mfr=true

As a better solution, you might want to give a group of administrators only
the read permissions and change permissions under the special permissions
tab. This will let this group to manage the permissions while never having
rights to access the files. If you also deny this group the take ownership
right, then you will have effectively created a group that can manage the
permissions but never access. You will still need to allow the system and
full admin the ability to take ownership should there be a problem -- but you
never use the actualy full admin for anything... RIGHT?

http://technet2.microsoft.com/windowsserver/en/library/c57b42dc-421a-4f2c-b259-107a8ac019081033.mspx?mfr=true

Hope this helps,
--
Ryan Hanisco
MCSE, MCTS: SQL 2005, Project+
Chicago, IL

Remember: Marking helpful answers helps everyone find the info they need
quickly.


"AE" wrote:

Hi all,

I manage a network in a hospital (ie. lots of security and patient privacy
issues)

I setup a shared drive on a Win2003 machine, and granted Full access only to
doctors.
Administrators are excluded.

The problem occurs when one doctor is being replaced, how can I add the new
doc to the list while I do not have any permissions for the folder. Is there
a way to keep this priviledge for admins and taking out the read/write
permissions?

fyi: We are running AD on a Win2003 SBS server. All our machines are xp.

Thank you,
~ae
.



Relevant Pages

  • Re: More security questions
    ... You shouldn't be logging in as Admin, ... have permissions to do anything. ... Usernames/passwords/group membership are stored in the mdw. ... Microsoft Access MVP ...
    (microsoft.public.access.security)
  • Re: NTFS owner problem
    ... power options, ... permissions that control access. ... to which any admin account should have full access. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Any way to remove ADMIN$ only?
    ... partition to allow you to set local permissions. ... Network Security Specialist ... Any way to remove ADMIN$ only? ... default security of Windows drives. ...
    (Focus-Microsoft)
  • [UNIX] Privilege Escalation Vulnerability on phpBB
    ... permissions), so although admin rights are needed to view the page, anyone ... Goto the board you wish to change the permissions for in the normal way ... Find the base directory location of the board for the script, ... This bulletin is sent to members of the SecuriTeam mailing list. ...
    (Securiteam)
  • Q: low permission cannot convert from A97 to A2000/2003
    ... A97, but the database is sent out and used by contractors (user permissions) ... The admin user has full privileges. ... The problem we are having is converting the database from A97 to 2000+. ...
    (microsoft.public.access.security)