We help IT Professionals succeed at work.

how do I prevent NTFS "change permissions" from being granted to the owner of files on Windows 2012 shared folder?

93 Views
Last Modified: 2019-01-16
I'm trying to build a share where users can create and manage their own files, but not those belonging to others.  
Steps I've taken:
  1. I create the folder 'sharename', remove all inheritance
  2. add domain and local admins with "full Control" access.
  3. add "Creator/Owner" with all advanced permissions except "full Control", "Change permissions", and "Take ownership"
  4. add Authenticated Users with "Traverse folder/execute file", "List folder/read data", "Read attributes", "Create Files/write Data", and "Read permissions"
 
So here's the issue:  When USER_A creates a file on the share, their user ID becomes the owner of the file, and they should get all of the permissions granted to the owner as noted above, but what happens is that they get those, but in addition they also get the "change permissions" access.

Where does that "change permissions" access come from, and how can I prevent the user from getting it when they create a file?
Comment
Watch Question

Computer Service Technician
CERTIFIED EXPERT
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION

Author

Commented:
I guess I should have realized this.  Getting caught up in the weeds a bit.  Thanks!
Robert RetzerComputer Service Technician
CERTIFIED EXPERT

Commented:
It happens to all of us.... we often need another person who may see the problem from a different angle. We all often over look the obvious. Thanks for awarding the points...

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions