Re: What xcacls.exe command will allow me to shift ownership to the user?
nospam.please_at_ualberta.ca
Date: 08/16/04
- Next message: Kristofer Gafvert: "Re: MSDN Download"
- Previous message: Doug Sherman [MVP]: "Re: Remote Access to Windows 2000 Client Computers"
- In reply to: Spin: "What xcacls.exe command will allow me to shift ownership to the user?"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 16 Aug 2004 19:00:57 GMT
XCACLS and pretty much any other MS tool will only allow you to "take"
ownership, not "give" it.
The original idea here was part of the usual "security through obscurity", in
that a user was supposed to be able to tell if an administrator had looked at
their files by seeing that the ownership had been taken by an administrator,
which was (supposedly) the only way an administrator could change the
permissions to get at the file.
You can get few freewares called things like setowner that will allow you to
set the owner of a folder/files. Some links to these follow:
http://www.securityfocus.com/tools/1424
http://ntsecurity.nu/toolbox/setowner/
http://peter.verhas.com/progs/c/nt/pvt/index.html
In article <2o55phF747r0U1@uni-berlin.de>, "Spin" <spin@spin.com> wrote:
|Notable Gurus,
|
|I am an admin of a Home Directory File Server and have many directories of
|users. I want to use the xcacls.exe utility to give away ownership of
|selected folders to users when necessary, for example, in Windows 2000 and
|above, I need to ensure the user is the OWNER of their profile folder or
|else their roaming profile will not work. What xcacls.exe command will
|allow me to shift ownership to the user?
|
|
|
|
- Next message: Kristofer Gafvert: "Re: MSDN Download"
- Previous message: Doug Sherman [MVP]: "Re: Remote Access to Windows 2000 Client Computers"
- In reply to: Spin: "What xcacls.exe command will allow me to shift ownership to the user?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|