J
johnst99
Guest
I have a user who can take ownership of a folder when i have expressly denied the user and administrator/s all permissions including take ownership
Users on a single Win 10 PC and as I am not just the only one who uses the PC I want to lock a folder down to stop anyone else accessing the folder who may use the PC.
Below are examples account names but demonstrate the problem
*** Email address is removed for privacy *** (me)
*** Email address is removed for privacy *** (another user on the PC)
all other accounts are disabled
Using the advanced folder permissions I have disabled inheritance on the folder and denied all permissions for administrator (account which is disabled) and the other user on the PC *** Email address is removed for privacy *** (both users *** Email address is removed for privacy *** and *** Email address is removed for privacy ***) have microsoft accounts and are linked for login on the PC).
I am trying to ensure that the user account on the PC *** Email address is removed for privacy *** or any other new account or administrator who uses the PC, cannot access my personal folder or get access by taking ownership.
Strangely even though the "effective access" for the user *** Email address is removed for privacy *** and administrator states the user/s are denied all permissions (have tried both not allowing and denying, the user *** Email address is removed for privacy *** can still "take ownership". I can stop the administrator taking access but I cannot stop the other user *** Email address is removed for privacy *** (who is an administrator). taking access !
The only factor that may be relevant is that the user *** Email address is removed for privacy *** was the first user created when i installed windows and the fact that the account names are similar. I dont think they are in the same family (they were once) but this wont make a difference ?
Please advise as this is incredibly frustrating
Continue reading...
Users on a single Win 10 PC and as I am not just the only one who uses the PC I want to lock a folder down to stop anyone else accessing the folder who may use the PC.
Below are examples account names but demonstrate the problem
*** Email address is removed for privacy *** (me)
*** Email address is removed for privacy *** (another user on the PC)
all other accounts are disabled
Using the advanced folder permissions I have disabled inheritance on the folder and denied all permissions for administrator (account which is disabled) and the other user on the PC *** Email address is removed for privacy *** (both users *** Email address is removed for privacy *** and *** Email address is removed for privacy ***) have microsoft accounts and are linked for login on the PC).
I am trying to ensure that the user account on the PC *** Email address is removed for privacy *** or any other new account or administrator who uses the PC, cannot access my personal folder or get access by taking ownership.
Strangely even though the "effective access" for the user *** Email address is removed for privacy *** and administrator states the user/s are denied all permissions (have tried both not allowing and denying, the user *** Email address is removed for privacy *** can still "take ownership". I can stop the administrator taking access but I cannot stop the other user *** Email address is removed for privacy *** (who is an administrator). taking access !
The only factor that may be relevant is that the user *** Email address is removed for privacy *** was the first user created when i installed windows and the fact that the account names are similar. I dont think they are in the same family (they were once) but this wont make a difference ?
Please advise as this is incredibly frustrating
Continue reading...
