Yes, if you create a folder you get Creator Owner, but they shouldn't be able to create folders under %programfiles% unless they are an admin anyway
We see this problem where people create folders under shared drives, that each new folder is owned by the creating user who then has the added rights. The solution is some weekly subinacl tasks that re-take ownership of the whole fileserver structure back to BUILTIN\Administrators On 28 April 2010 16:32, David Mazzaccaro <[email protected]>wrote: > Also - I've been curious about the "creator owner" NTFS property. > Say I give a user account local admin rights, log in as them, install > whatever software... remove admin rights. > Will they have "creator owner" full control on say... "prog files/software > application" because they were the creator of that directory? > > > ------------------------------ > *From:* Carl Houseman [mailto:[email protected]] > *Sent:* Wednesday, April 28, 2010 11:26 AM > *To:* NT System Admin Issues > *Subject:* RE: Software installs on new PCs > > Shouldn't really matter. Why do you think it would make a difference? > > > > Carl > > > > *From:* David Mazzaccaro [mailto:[email protected]] > *Sent:* Wednesday, April 28, 2010 11:19 AM > *To:* NT System Admin Issues > *Subject:* Software installs on new PCs > > > > For those that don’t use images/GPOs to deploy software to new PCs… > > When a new computer is going out to a user, how do you install the software > + hardware they need? > As a local administrator? > Domain administrator? > Or give the end user's account local admin rights and log in as them, > install the stuff they need, then take away admin rights when you hand the > machine over? > > TIA > > > . > > > > > > > > > > > . > > > > > > -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
