I have a file I want to protect.
So I set permissions using Explorer's GUI as follows:


C:\testfolder\testfile1 Everyone:(DENY)(special access:)
                                 DELETE
                        BUILTIN\Administrators:F
                        NT AUTHORITY\SYSTEM:F
                        BUILTIN\Users:R

I am an Administrator on the machine.

I can delete the file.

Why?  How?

What am I missing?

If instead I deny Modify, then the permissions look like this:
C:\testfolder\TestFile1 Everyone:(DENY)(special access:)
                                 DELETE
                                 READ_CONTROL
                                 FILE_READ_DATA
                                 FILE_WRITE_DATA
                                 FILE_APPEND_DATA
                                 FILE_READ_EA
                                 FILE_WRITE_EA
                                 FILE_EXECUTE
                                 FILE_READ_ATTRIBUTES
                                 FILE_WRITE_ATTRIBUTES
                        BUILTIN\Administrators:F
                        NT AUTHORITY\SYSTEM:F
                        BUILTIN\Users:R

and I can STILL delete the file

Can somebody please explain what is going on?

--BM

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to