Re: deny access to all but 1 folder
- From: "Vera Noest [MVP]" <vera.noest@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 29 May 2007 06:59:59 -0700
Andy, I've got the feeling that we have a misunderstanding going
on, because with the default NTFS permissions on the C: drive, and
normal user rights, this should be impossible.
When I look at the secuirty settings on my C:\Windows\system32
folder, it says:
Authenticated Users : Read + Execute
Server Operators : Modify
Administrators, CREATOR OWNER, SYSTEM : Full Control
So no way can a normal user delete anything under system32.
How are your permissions on that folder?
And you say: "the user can delete anything they want in
system32 or any other folder on the PC"
Is "PC" a typo? Aren't we talking about a Windows 2003 Terminal
Server?
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___
"Andy Dyble" <andy.dyble@xxxxxxxxxxx> wrote on 29 maj 2007 in
microsoft.public.windows.terminal_services:
Vera.
I understand what you mean about hiding etc. but in response to
:
Again: what is your problem with these users having the default
NTFS permissions on c:\windows\system32\?
I tried this and the user can delete anything they want in
system32 or any other folder on the PC, they might as well have
admin rights.
It looks like the only option is to configure security on every
top level folder in drive C, which isn;t the end of the world.
Thanks
Andy
- Follow-Ups:
- Re: deny access to all but 1 folder
- From: Andy Dyble
- Re: deny access to all but 1 folder
- References:
- deny access to all but 1 folder
- From: Andy Dyble
- Re: deny access to all but 1 folder
- From: Andy Dyble
- Re: deny access to all but 1 folder
- From: Andy Dyble
- Re: deny access to all but 1 folder
- From: Vera Noest [MVP]
- Re: deny access to all but 1 folder
- From: Andy Dyble
- Re: deny access to all but 1 folder
- From: Vera Noest [MVP]
- Re: deny access to all but 1 folder
- From: Andy Dyble
- Re: deny access to all but 1 folder
- From: Vera Noest [MVP]
- Re: deny access to all but 1 folder
- From: Andy Dyble
- deny access to all but 1 folder
- Prev by Date: Re: Free book
- Next by Date: Re: General Question re Terminal Services
- Previous by thread: Re: deny access to all but 1 folder
- Next by thread: Re: deny access to all but 1 folder
- Index(es):
Relevant Pages
|