newbie questions

[dieter2]

i'm playing around with 2000 server and i'm trying to secury my folders and files but when i remove the sign by "read permissions" my users are unable to read files I thought that the "read permissions" stoud for the ntfs permision (so no one can see who has permission too that file) not the file permission
i'm i wrong ?
(what about the change permissions then ?)

2) when a user creates a file he can also change the security settings on that file (full controlle, read ,write ...) is there a way to change this ?

 

[dieter2]

2)when a user creates a file or folder he can also change the security settings on that file or folder (full controlle, read ,write ...) is there a way to change this so the user can't lock-out the administrator ?

 

[dberg35]

As for question 2 you go to the advance settings in security and change ownership of that file also giving the creator full control.
Question 1, what you could do is create groups in AD and assign each user to each group. Then you can in a folders security assign that group and select what permisions the get like read only. Also check this out

https://www.microsoft.com/windows20...2000/en/advanced/help/acl_set_permissions.htm

 

[dieter2]

nr 1 I had already figured out

but for nr 2 what I try to acccomplisch
I set a sort of permission for the users ( everything but change permission, and take ownerschip) but when a user creates a folder he has the ability to check the full control option and reset my default setup) so what i'm trying to accomplish is when a user creates a folder he has the same options as the drive (full controll grey out and no option the check it)