On Wed, Apr 28, 2010 at 11:32 AM, David Mazzaccaro <[email protected]> wrote: > Also - I've been curious about the "creator owner" NTFS property. > Say I give a user account local admin rights, log in as them, install > whatever software... remove admin rights. > Will they have "creator owner" full control on say... "prog files/software > application" because they were the creator of that directory?
That can sometimes cause problems. That's one reason I avoid granting user accounts admin rights, even temporarily. Install using a separate account. It also makes it easier to spot software which is not multi-user or security aware and will cause problems later. Plus, if the user has a roaming profile, and that roaming profile is actually compromised and you're not aware of it, you've just potentially compromised the machine. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
