Solved

Giving Ownership ...

Posted on 2001-06-22
5
459 Views
Last Modified: 2010-04-13
OK, here's a quick, yet somehow amazingly annoying question.

As an administrator, you can TAKE ownership of a file .. but you cannot GIVE ownership of a file.

Straight from the Microsoft website:

"You can transfer ownership two ways:
          The current owner can grant the Take ownership permission to others,
          allowing those users to take ownership at any time.
          An administrator can take ownership of any file on the computer. However,
          the administrator cannot transfer ownership to others. This restriction keeps
          the administrator accountable."

Do you read that .. it KEEPS THE ADMINISTRATOR ACCOUNTABLE. Is there really *NO* *WAY* to give ownership of a file to someone? If there is no way to do that, the ENTIRE quota management system is a big piece of crapola...

As the administrator, I should be in TOTAL control of what goes where and who owns what.

Is there no way to do a Unix-Like CHOWN command? This should be VERY simple to do.

Any help here?
0
Comment
Question by:davidzarnitzky
5 Comments
 
LVL 7

Accepted Solution

by:
franka earned 100 total points
ID: 6217664
there are many commercial tools that are able to do that, but this probably the best, if you have the reskit oder technet.


Using SubInACL from the

NT oder win2k reskit

you can set ownership on a folder using the following syntax:

subinacl /subdirectories <FolderPath> /setowner=<DomainName\UserName>

To set ownership for all the <FolderPath> objects:

subinacl /subdirectories <FolderPath>\*.* /setowner=<DomainName\UserName>



0
 
LVL 4

Expert Comment

by:emb
ID: 6218311
See:

http://wwwthep.physik.uni-mainz.de/~frink/nt.html

for an NT implementation of CHOWN.  Not sure if it works on Win2K but it uses the Win32 API so I can see no reason why not.

emb

0
 
LVL 4

Expert Comment

by:emb
ID: 6218356
Incidentally, your comment that "As the administrator, I should be in TOTAL control of what goes where and who owns what." doesn't quite fit in with the philosophy of discretionary access control that NT attempts to follow.  By this principle, it is down to the end user to decide who has access to their files, which might include preventing administrator's from reading them.  In fact it is for precisely this reason that it is not supposed to be possible to "give" ownership of NT files...an administrator can take owenership of files and look at them, but can't give ownership back to cover their tracks.  Of course, the clever administrator will take ownership, read the file, then restore it from backup with its original permissions...or use one of the chown like commands which do the "impossible".

emb
0
 
LVL 5

Expert Comment

by:cempasha
ID: 8237199
Dear questionner/expert(s)

No comment has been added lately, so it's time to clean up this TA.
I'll leave a recommendation in the Cleanup topic area that this question is to be:

- Answered by: franka

Please leave any comments here within the next seven days.

==> PLEASE DO NOT ACCEPT THIS COMMENT AS AN ANSWER ! <==

PaSHa

Cleanup volunteer



0
 

Expert Comment

by:modulo
ID: 8280213
Finalized as proposed

modulo

Community Support Moderator
Experts Exchange
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now