Stop users changing permissions on folders

[Teamaker]

We are using Win2k server and Pro we have a problem with users unchecking the Inherit permissions box on their network drive folder and then removing Admins, this is very annoying as we then have to take ownership of the folder.

We have removed full controll for them but it seems they can still do it, any suggestions.

!!A good cup of Tetley keeps the madness at bay!!

 

[wolluf]

What security level are these users? (it sounds like they are members of Administrators group - if so, you'll need to downgrade them to prevent this).

 

[echoecho]

I believe you only need change to edit the permissions.

 

[Teamaker]

They are only domain users, i was suprised buy this too but try it yourself users can uncheck the "do not allow permissions to propergate" box and then they can play with permissions.

They only have change permissions on root folder not full.

These are fresh install Win2k pro boxes and new servers 2k3.

!!A good cup of Tetley keeps the madness at bay!!

 

[Teamaker]

Anyone tried this yet?

Or found a solution.

!!A good cup of Tetley keeps the madness at bay!!

 

[netwalker1]

You can remove the ability to take ownership from these users !
you will find this in the user rights , in the Security settings ..



Mohamed Farid
Know Me No Pain , No Me Know Pain !!!