Solved

How do I make it so that no one except the Administrators can see the Security tab in the Properties window of a Directory or file?

Posted on 2008-10-05
1
170 Views
Last Modified: 2013-12-04
I want to make it so certain users cannot see the security tab or be able to edit the security permissions.  How do I do that?  
0
Comment
Question by:michaelbphillips
1 Comment
 
LVL 11

Accepted Solution

by:
sysreq2000 earned 250 total points
ID: 22645485
Start Active Directory Users and Computers.
 
Right-click the domain, and then click Properties.
 
Click the Group Policy tab on the domain properties dialog box to view the default domain policy.
 
Click New. New Group Policy Object should appear in the list of objects. Rename this Policy to Remove Security Tab. Make sure this policy is positioned directly under the default domain policy.
 
Click Remove Security Tab, and then click Edit to start the Group Policy Editor.
 
Expand Computer Configuration, Windows Settings, Security Settings, and then click Registry.
 
Right-click in the left pane, and then click Add Key.
 
Paste the following key in the text box, and then click OK:
CLASSES_ROOT\CLSID\{1F2E5C40-9550-11CE-99D2-00AA006E086C}

Note that there may be a delay before you can proceed to the next step, and this is normal.
 
The Database Security Editor appears. You need to add the user or group that you want the Security tab to be removed from.
 
Change the permission on this key for the users and/or groups that you added in the previous step to "Deny Read." This prevents the user from being able to instantiate the needed components to display the Security and Sharing tabs. Click OK twice to complete the settings and exit the Group Policy Editor.
 
Click New. New Group Policy Object should appear in the list of objects. Rename this Policy to Remove Sharing Tab. Make sure this policy is positioned directly under the default domain policy.
 
Click Remove Security Tab, and then click Edit to start the Group Policy Editor.
 
Expand Computer Configuration, Windows Settings, Security Settings, and then click Registry.
 
Right-click in the left pane, and then click Add Key.
 
Paste the following key in the text box, and then click OK:
CLASSES_ROOT\CLSID\{40dd6e20-7c17-11ce-a804-00aa003ca9f6}

Note that there may be a delay before you can proceed to the next step, and this is normal.
 
The Database Security Editor appears. You need to add the user or group that you want the Security tab to be removed from.
 
Change the permission on this key for the users and/or groups that you added in the previous step to "Deny Read." This prevents the user from being able to instantiate the needed components to display the Security and Sharing tabs. Click OK twice to complete the settings and exit the Group Policy Editor.

And of course, credit where credit is due:

http://www.commodore.ca/windows/remove_sharing_security_tab.htm

0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question