Locking down the "inheritance" option in NTFS security.

Posted on 2004-11-29
Last Modified: 2013-12-04
Dear Experts,

Is it possible to prevent users with "full control" access on a folder from unselecting the "inheritance " option. Is there some sort of GPO, patch, util, etc, that could perhaps "grey out" the option of unselecting the inheritance. OS is Windows XP Pro, Windows Server 2003.

Thanks in advance.

Question by:kurtc0107
    LVL 11

    Accepted Solution

    Hello kurtc0107,

    To my knowledge, you can't do this because FC access includes change permissions access.  You can assign the users special permissions that give they all permissions with "read permissions" access.  Then they can only read and not change.

    Here is how to setup special permissions:

    LVL 87

    Expert Comment

    Full access means just that; full access. You can't restrict restrict someone having full access to an object from certain accesses.
    LVL 11

    Expert Comment

    What is your goal?  It might be easier to give  you advice if we know more specifically what you want to accomplish.

    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    Join & Write a Comment

    In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
    This is a guide to the following problem (not exclusive but here) on Windows: Users need our support and we supporters often use global administrative accounts to do this. Using these accounts safely is a real challenge. Any admin who takes se…
    This video discusses moving either the default database or any database to a new volume.
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    730 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now