Permission Definitions

[Grant Lee]

Could you give me either a location where I can go to
reference it or send me the difinitions of the different
permissions in Microsoft Windows 2000. What does Modify
allow in comparison to Full Control? Can a user group
with Modify permissions change the name of a folder, the
location of a folder, add or remove other groups form the
folder or even change the existing permissions?

Our Network Administrator claims that a user group with
Modify activaqated in permissions, can't do more than
read/write. and execute. That activating the modify only
saves the time needed to activae the otheres below it,
i.e. Read & Execute, List Folder Contents, Read, and
Write. I find no literature one way or the other on this.


Thank you
Grant

 

[Steven L Umbach]

Modify allows everything except change permissions and take ownership. In
particular it allows deleting that write does not. Modify does not allow
adding user groups to the permissions page or modifying permissions for
existing users in the permissions page. If a user is a member of more than
one group. Then that user will have the most liberal permissions granted
from any group with the exception that a deny permission in any group will
override allow permissions from another group with the exception that
explicit allow overrides inherited deny. The link below is pretty good at
explaining ntfs. -- Steve

http://www.windowsitlibrary.com/Content/592/toc.html

 

[Drew Cooper [MSFT]]

Check out "file and folder permissions" in Help. Should be same as this:
http://www.microsoft.com/technet/tr.../winxppro/proddocs/acl_folder_permissions.asp

 

[Grant H. Lee]

Seve;
That is what I though until I, erroneously, changed
permissions on a folder and forgot to include the
Administrators. I was unable to go back into the Security
of that folder to make any changes. Logging on as the
System Administrator had no effect. The only way I was
able to go back into the Security of that folder was to
add that group to my profile, on the PDC, and log on with
my logon. I was, then, able to add groups, change
permissions, anything I wantd to do except delete the
folder. The group that I added to my profile, had nothing
above Modify permissions. I tried your referance and was
unable to navigate in it. Any other ideas? Was this just
a fluke? The onloy dumb question is the one not asked.
Grant