?
Solved

How do I make it so that no one except the Administrators can see the Security tab in the Properties window of a Directory or file?

Posted on 2008-10-05
1
Medium Priority
?
179 Views
Last Modified: 2013-12-04
I want to make it so certain users cannot see the security tab or be able to edit the security permissions.  How do I do that?  
0
Comment
Question by:michaelbphillips
1 Comment
 
LVL 11

Accepted Solution

by:
sysreq2000 earned 1000 total points
ID: 22645485
Start Active Directory Users and Computers.
 
Right-click the domain, and then click Properties.
 
Click the Group Policy tab on the domain properties dialog box to view the default domain policy.
 
Click New. New Group Policy Object should appear in the list of objects. Rename this Policy to Remove Security Tab. Make sure this policy is positioned directly under the default domain policy.
 
Click Remove Security Tab, and then click Edit to start the Group Policy Editor.
 
Expand Computer Configuration, Windows Settings, Security Settings, and then click Registry.
 
Right-click in the left pane, and then click Add Key.
 
Paste the following key in the text box, and then click OK:
CLASSES_ROOT\CLSID\{1F2E5C40-9550-11CE-99D2-00AA006E086C}

Note that there may be a delay before you can proceed to the next step, and this is normal.
 
The Database Security Editor appears. You need to add the user or group that you want the Security tab to be removed from.
 
Change the permission on this key for the users and/or groups that you added in the previous step to "Deny Read." This prevents the user from being able to instantiate the needed components to display the Security and Sharing tabs. Click OK twice to complete the settings and exit the Group Policy Editor.
 
Click New. New Group Policy Object should appear in the list of objects. Rename this Policy to Remove Sharing Tab. Make sure this policy is positioned directly under the default domain policy.
 
Click Remove Security Tab, and then click Edit to start the Group Policy Editor.
 
Expand Computer Configuration, Windows Settings, Security Settings, and then click Registry.
 
Right-click in the left pane, and then click Add Key.
 
Paste the following key in the text box, and then click OK:
CLASSES_ROOT\CLSID\{40dd6e20-7c17-11ce-a804-00aa003ca9f6}

Note that there may be a delay before you can proceed to the next step, and this is normal.
 
The Database Security Editor appears. You need to add the user or group that you want the Security tab to be removed from.
 
Change the permission on this key for the users and/or groups that you added in the previous step to "Deny Read." This prevents the user from being able to instantiate the needed components to display the Security and Sharing tabs. Click OK twice to complete the settings and exit the Group Policy Editor.

And of course, credit where credit is due:

http://www.commodore.ca/windows/remove_sharing_security_tab.htm

0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question