I have a file I want to protect.
So I set permissions using Explorer's GUI as follows:
C:\testfolder\testfile1 Everyone:(DENY)(special access:)
DELETE
BUILTIN\Administrators:F
NT AUTHORITY\SYSTEM:F
BUILTIN\Users:R
I am an Administrator on the machine.
I can delete the file.
Why? How?
What am I missing?
If instead I deny Modify, then the permissions look like this:
C:\testfolder\TestFile1 Everyone:(DENY)(special access:)
DELETE
READ_CONTROL
FILE_READ_DATA
FILE_WRITE_DATA
FILE_APPEND_DATA
FILE_READ_EA
FILE_WRITE_EA
FILE_EXECUTE
FILE_READ_ATTRIBUTES
FILE_WRITE_ATTRIBUTES
BUILTIN\Administrators:F
NT AUTHORITY\SYSTEM:F
BUILTIN\Users:R
and I can STILL delete the file
Can somebody please explain what is going on?
--BM
~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~