Files rights and loging?

[sbovaird]

I have a directory that users normally have full access to except for FULL CONTROL and all of a sudden the MODIFY and WRITE permission were removed for the whole directory and sub-directory. What rights do users need to change rights and how can I find out who did this modification?

Thanks

Sterling

 

[djhawthorn]

You need full control or the special permission Change Permissions (P) (or the ability to Take Ownership (O), which will allow you to get full control) to modify file permissions on a file or directory.

You can turn on auditing for specific files and/or directories for specific users/groups, and just watch Permission Changes. You do this by selecting the file/directories you want to audit, click the "Security" Tab, then click "Auditing". You won't necessarily be able to find out who did it this time around, but if you enable auditing then next time it happens you'll be able to see who did the deed.

Hope that helps. MCSE NT4/W2K