Re: What xcacls.exe command will allow me to shift ownership to the user?

Tech-Archive recommends: Fix windows errors by optimizing your registry

nospam.please_at_ualberta.ca
Date: 08/16/04


Date: Mon, 16 Aug 2004 19:00:57 GMT

XCACLS and pretty much any other MS tool will only allow you to "take"
ownership, not "give" it.

The original idea here was part of the usual "security through obscurity", in
that a user was supposed to be able to tell if an administrator had looked at
their files by seeing that the ownership had been taken by an administrator,
which was (supposedly) the only way an administrator could change the
permissions to get at the file.

You can get few freewares called things like setowner that will allow you to
set the owner of a folder/files. Some links to these follow:

http://www.securityfocus.com/tools/1424
http://ntsecurity.nu/toolbox/setowner/
http://peter.verhas.com/progs/c/nt/pvt/index.html

In article <2o55phF747r0U1@uni-berlin.de>, "Spin" <spin@spin.com> wrote:
 |Notable Gurus,
 |
 |I am an admin of a Home Directory File Server and have many directories of
 |users. I want to use the xcacls.exe utility to give away ownership of
 |selected folders to users when necessary, for example, in Windows 2000 and
 |above, I need to ensure the user is the OWNER of their profile folder or
 |else their roaming profile will not work. What xcacls.exe command will
 |allow me to shift ownership to the user?
 |
 |
 |
 |



Relevant Pages

  • RE: Repair Re-install Goof Up?- Need Help
    ... How to take ownership of a folder ... In the Name list, click your user name, or click Administrator if you ... Do you want to replace the directory permissions with permissions ...
    (microsoft.public.windowsxp.general)
  • Re: cannot rename files or change icons
    ... If your repair functions in Office are failing, your only real choice is an uninstall and reinstall of the entire Office set. ... As far as the read only setting, you are not really concerned by that, since it's a normal part of XP's file system that all files capable of ownership are indeed read only to those who do not own it. ... Thanks for the excellent Administrator Account directions - worked perfectly ... I've attempted that from both Administrator ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: ownership of romaing profiles causes them to fail
    ... > If I change the ownership of a user's profile folder and all files ... It *is* owned by them when the roaming profile folder is created. ... I like doing this as I like having access as administrator to the profile ...
    (microsoft.public.win2000.networking)
  • Re: ownership of romaing profiles causes them to fail
    ... > If I change the ownership of a user's profile folder and all files ... It *is* owned by them when the roaming profile folder is created. ... I like doing this as I like having access as administrator to the profile ...
    (microsoft.public.windows.server.networking)
  • Re: Windows XP Pro logon problem
    ... as an administrator and first take ownership of the folder/files that will ... below explain how to do that and if you need to take ownership do so at the ... a parallel install of the operating system so that you have a dual boot ...
    (microsoft.public.windowsxp.security_admin)