Restrict Take Ownership Right on Folders? NTFS Permission Question

Posted on 2011-04-22
Last Modified: 2012-05-11
Is there a way to restrict the 'take ownership right' on folders to just one account? Please advise.
Question by:mmoya
    LVL 31

    Accepted Solution

    Anyone with Admin rights to the server can perform this action.  The only way to restrict it is to remove Admin rights.

    LVL 9

    Expert Comment

    If the data is that sensitive and the admins are not sufficiently trusted, then find a different place to hold the data or userights management, encryption, or some other means to protect the data.
    You may remove the ability of members of the Administrators group to take
    ownership, but it is all or none, not something you may selectively remove
    for just the one folder. Anyway, removing that right would not prevent them
    from getting at the data (consider the backup/restore route). Just a food for thought.  

    I have included a link below to help you out.

    LVL 31

    Assisted Solution


    How would you go about limiting a server Administrator from taking ownership of a file?  I am not aware of such a restriction.  An alternative would be to encrypt that data if it is a sensitivity issue.


    Author Comment

    Thank you for your inputs.

    What about restricting it via the group policy? Would the setting below work?

    Computer Configuration\Security Settings\Local Policies\User Rights Assignment\

    Take ownership of files or other objects -> to whatever account we wish to use?
    LVL 31

    Assisted Solution

    That will grant the users specified the right.  It will not remove the right from Administrators.


    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Join & Write a Comment

    A quick step-by-step overview of installing and configuring Carbonite Server Backup.
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    731 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now