how do I prevent NTFS "change permissions" from being granted to the owner of files on Windows 2012 shared folder?

Intelli-Seeker
Intelli-Seeker used Ask the Experts™
on
I'm trying to build a share where users can create and manage their own files, but not those belonging to others.  
Steps I've taken:
  1. I create the folder 'sharename', remove all inheritance
  2. add domain and local admins with "full Control" access.
  3. add "Creator/Owner" with all advanced permissions except "full Control", "Change permissions", and "Take ownership"
  4. add Authenticated Users with "Traverse folder/execute file", "List folder/read data", "Read attributes", "Create Files/write Data", and "Read permissions"
 
So here's the issue:  When USER_A creates a file on the share, their user ID becomes the owner of the file, and they should get all of the permissions granted to the owner as noted above, but what happens is that they get those, but in addition they also get the "change permissions" access.

Where does that "change permissions" access come from, and how can I prevent the user from getting it when they create a file?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Computer Service Technician
Commented:
when someone is the owner of a file they are automatically given the ability to change ownership permissions as they are the owner can can give other people permission to access: read or write to this file. I you dont want other users to access this user's files then the user should have their own private network folder that no one can access except for the user.

Author

Commented:
I guess I should have realized this.  Getting caught up in the weeds a bit.  Thanks!
Robert RComputer Service Technician

Commented:
It happens to all of us.... we often need another person who may see the problem from a different angle. We all often over look the obvious. Thanks for awarding the points...

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial