RajKohli said:
There is only one Recycle Bin in Windows for all the users. A file
deleted by
any user can be seen in Recycle Bin and any user can restore, cut &
paste the
files within from the Recycle Bin. There is no Each Recycle Bin. There
is
only one Recycle Bin. Any user can delete all the contents of the
Recycle Bin.
For more information:
http://www.microsoft.com/resources/.../all/proddocs/en-us/recycle_bin.mspx?mfr=true
"Windows allocates one Recycle Bin for each partition or hard disk. If
your hard disk is partitioned, or if you have more than one hard disk in
your computer, you can specify a different size for each Recycle Bin"
(from the link that you provided). Geez, what a stretch from there
being one Recycler folder to there only being one Recycle Bin for all
accounts.
You get a <d>:\Recycler path in each partition. That is NOT the same as
having one Recycle Bin folder that each user can access. Unless you are
foolishly giving admin privileges to every account (i.e., putting them
all in the Administrators group), only admins can see the deleted files
in the Recycle Bin that are for other accounts. You do understand how
permissions work under an NT-based version of Windows, right? You do
know that permissions requires you to use NTFS, right? Files that are
owned by one account cannot be seen by another non-admin account in the
Recycle Bin. If you are still using FAT then *you* have elected to NOT
provide security between accounts for shared users of the same host.
Guess what? There is also only one "C:\Documents and Settings" folder
in your Windows installation yet there are subfolders for each account
and each has permissions that control who can read/write files under
those account subfolders. So what if there is only one Recycler folder
in each partition. That does not eliminate the use of permissions in
controlling who can see or retrieve what from that folder. I can't see
how anyone that knows a smidgen about NT would figure because there was
one parent folder that then everything under it was accessible to
everyone. Have you ever deleted some files and then used DOS commands
to navigate under the Recycler folder? See all those S-1-5-21 named
subfolders? Each subfolder is for each account based on their security
ID (SID) in the SAM database for managing accounts. Windows Explorer is
programmed to hide "special" folders so you need to use the DOS shell to
run "dir /ad" to see the Recycler folder, "cd" to change to it, and "dir
/ad" again to see those SID-named subfolders for each account (that has
deleted some files previously to then create that subfolder) and "dir
/ah" to see the hidden-marked files underneath those subfolders.
A better article is at
http://support.microsoft.com/kb/248399/en-us.
Notice that it mentions a separate subfolder is created for each account
based on the SID for that account. Then read
http://www.microsoft.com/technet/security/bulletin/fq00-007.mspx which
mentions that permissions are set on each SID-named subfolder to provide
security ("When Windows NT creates the folder, it assigns permissions
that only allow the owner to access it"), just like permissions are used
under the %userprofile% folders to regulate who can access each
account's private files. Of course, admins have permissions to get at
any account's files (if the user removed admins from their permissions,
admins can put them back or take ownership of the file). So stop making
all your user accounts into admin accounts. If you don't want all the
users of a shared host to manipulate each other's files then don't make
them admin accounts and start using NTFS instead of FAT.
Obviously if you are still using the archaic FAT file system then you
don't get any file security. Permissions are a feature of NTFS. There
is no reason not to use NTFS, especially for the OS partition. If you
need to share your data files between multibooted operating systems
where some of them can only understand FAT then create a FAT partition
and keep your files there so they can be read by whatever OS you use to
boot your host (i.e., use a shared partition that uses a file system
that all your operating systems can access - but remember that you lose
file security without NTFS).
NTFS Permissions
http://www.windowsitlibrary.com/Content/592/toc.html
Understanding NTFS Permissions
http://www.windowsecurity.com/articles/Understanding-Windows-NTFS-Permissions.html
You can Google for lots of other articles to help you understand NTFS
permissions.
