setting file owner

  • Thread starter Thread starter bjohn
  • Start date Start date
B

bjohn

I want to remove everyone from the security permissions of a file and
set the OWNER to be localadmin only. (not administrators)

because I don't want administrators adding themself to the security tab
again.

How can I do this?
tried many different variations, no help.

Thanks
 
bjohn said:
I want to remove everyone from the security permissions of a
file and
set the OWNER to be localadmin only. (not administrators)

because I don't want administrators adding themself to the
security tab
again.

How can I do this?
tried many different variations, no help.

Thanks
Click to expand...

Hi,

You cannot set an Owner. Ownership cannot be set, it can only be taken
by Administrators or those who have Full Control.

Administrators can ALWAYS take Ownership. If you don’t want the
Administrators to do this, then take them out of the Administrators
group.

Cheers,

Lara
 
You would have to use a command line tool such as fileacl or subinacl to do
such but an administrator can always take ownership. If you can not trust
your administrators, do not add them to the administrators group or look
into using file encryption to manage access to data. File encryption such as
EFS should not be attempted however until you know all the best practices
and pitfalls. --- Steve
 
Why wouldn't something like this work when set using a domain GPO?
"c:\Program Files\Windows NT\Accessories\wordpad.exe",2,"O:LA"

(trying to change the owner of the file to local administrator

I believe it works when set on the local machine gpo.
 
Back
Top