• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 183
  • Last Modified:

How do I make it so that no one except the Administrators can see the Security tab in the Properties window of a Directory or file?

I want to make it so certain users cannot see the security tab or be able to edit the security permissions.  How do I do that?  
0
michaelbphillips
Asked:
michaelbphillips
1 Solution
 
sysreq2000Commented:
Start Active Directory Users and Computers.
 
Right-click the domain, and then click Properties.
 
Click the Group Policy tab on the domain properties dialog box to view the default domain policy.
 
Click New. New Group Policy Object should appear in the list of objects. Rename this Policy to Remove Security Tab. Make sure this policy is positioned directly under the default domain policy.
 
Click Remove Security Tab, and then click Edit to start the Group Policy Editor.
 
Expand Computer Configuration, Windows Settings, Security Settings, and then click Registry.
 
Right-click in the left pane, and then click Add Key.
 
Paste the following key in the text box, and then click OK:
CLASSES_ROOT\CLSID\{1F2E5C40-9550-11CE-99D2-00AA006E086C}

Note that there may be a delay before you can proceed to the next step, and this is normal.
 
The Database Security Editor appears. You need to add the user or group that you want the Security tab to be removed from.
 
Change the permission on this key for the users and/or groups that you added in the previous step to "Deny Read." This prevents the user from being able to instantiate the needed components to display the Security and Sharing tabs. Click OK twice to complete the settings and exit the Group Policy Editor.
 
Click New. New Group Policy Object should appear in the list of objects. Rename this Policy to Remove Sharing Tab. Make sure this policy is positioned directly under the default domain policy.
 
Click Remove Security Tab, and then click Edit to start the Group Policy Editor.
 
Expand Computer Configuration, Windows Settings, Security Settings, and then click Registry.
 
Right-click in the left pane, and then click Add Key.
 
Paste the following key in the text box, and then click OK:
CLASSES_ROOT\CLSID\{40dd6e20-7c17-11ce-a804-00aa003ca9f6}

Note that there may be a delay before you can proceed to the next step, and this is normal.
 
The Database Security Editor appears. You need to add the user or group that you want the Security tab to be removed from.
 
Change the permission on this key for the users and/or groups that you added in the previous step to "Deny Read." This prevents the user from being able to instantiate the needed components to display the Security and Sharing tabs. Click OK twice to complete the settings and exit the Group Policy Editor.

And of course, credit where credit is due:

http://www.commodore.ca/windows/remove_sharing_security_tab.htm

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now