NTFS Permission On Administrator Account

[Guest]

Operating System: Windows XP SP2:

Can a Built-in Administrator account put NTFS permissions on a Folder/File
Object created by an account who is a member of 'Admistrator/Administrators
group' in a workgroup environment?

 

[Malke]

Operating System: Windows XP SP2:

Can a Built-in Administrator account put NTFS permissions on a Folder/File
Object created by an account who is a member of 'Admistrator/Administrators
group' in a workgroup environment?

Yes. In XP, all user accounts with administrative privileges are equal.


Malke

 

[Guest]

Dear Malke,

Thanks for the answer.

However, I tried to apply NTFS permission "Deny: Delete and Delete Folders
and Subfolders" with my built-in Administrator account on the object created
by the account which is a member of Administrator/Administrators group in a
'Workgroup' environment but I was able to delete the folder object with deny
NTFS permissions still in effect with the account (member of administrator
group).

Let's make it more clear by the example below:

User Account "A" - Built in Administrator account.
User Account "B" - An account (member of Administrator account).

Folder Object Created by user account "B".

Account "A" takes the ownership of Folder object created by account "B". "A"
does not want "B" to be able to delete the folder therefore, denies "B" both
the NTFS permissions "Delete and Delete Folders / Subfolders and files.

However, "B" logs in and is able to delete the folder object with NTFS
permissions still in effect.


Hope I am able to make myself more clear with this example.

Waiting for your reply on this!

Regards,

 

[Malke]

Dear Malke,

Thanks for the answer.

However, I tried to apply NTFS permission "Deny: Delete and Delete Folders
and Subfolders" with my built-in Administrator account on the object created
by the account which is a member of Administrator/Administrators group in a
'Workgroup' environment but I was able to delete the folder object with deny
NTFS permissions still in effect with the account (member of administrator
group).

Let's make it more clear by the example below:

User Account "A" - Built in Administrator account.
User Account "B" - An account (member of Administrator account).

Folder Object Created by user account "B".

Account "A" takes the ownership of Folder object created by account "B". "A"
does not want "B" to be able to delete the folder therefore, denies "B" both
the NTFS permissions "Delete and Delete Folders / Subfolders and files.

However, "B" logs in and is able to delete the folder object with NTFS
permissions still in effect.


Hope I am able to make myself more clear with this example.

No, frankly you are not more clear. Let me be completely clear to you:
any administrative user can change any setting whatsoever in Windows XP.
If you want User B to not delete something, then make User B a regular
user. Or go to a domain.


Malke