[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1698
  • Last Modified:

Default NTFS Owner permissions on a newly created folder

We currently have a number of Windows 2003 server. On some of them when you create a folder, it puts the Administrators group of the server as the Owner (This is how we want it)

However on other servers it puts the creator as the owner (This is not how we want it)

Where can I set it so that any new folder that gets created, has the Local Administrators group as the owner?
0
MattNicholas
Asked:
MattNicholas
  • 2
1 Solution
 
Rob WilliamsCommented:
This is usually set on the parent folder. In the folders where they are owned by the creator, you will likely see in the NTFS/security permissions "CREATOR OWNER" with special permissions.

In the parent folder set the administrators group as owners, remove the Creator Owner permissions, and under advanced select replace permissions entries on all child objects....
Your decision, but this is not usually done on the "users" folder for things such as redirected my documents. You can run into problems if you tinker with permissions on those folders.

0
 
MattNicholasAuthor Commented:
Thanks for that.

But I created the folder on the root of the c:\ so where does it get it's default NTFS settings?

On some servers if you create a folder at the root it sets the Local Administrators group as the owner
However on other servers it puts the creator as the owner and not the Local Administrators group

I understand that I can change the NTFS permissions and replace them, but how do I set it so by default the Local Administators group is the owner at files created off the root?

Cheers,
Darren
0
 
Rob WilliamsCommented:
The default behavior on an NTFS root should be the creator is the owner. This is why you usually create a folder and make it a share. You can then set permissions on the parent folder and select to apply to child objects.
System drives are different, and the administrators group is the default owner.
You should be able to change the NTFS/Security permissions on the drive itself to affect root inherited permissions.
0
 
Henrik JohanssonSystems engineerCommented:
Default behavior is that if user is member of administrators group, the owner of the file/folder will be the administrators security group.

This is controlled by the following policy setting:
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\System Objects: Default owner of objects created by members of the Administrators group
* Administrators group (default)
* Object creator
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now