Results 1 to 3 of 3

Thread: Regular user locking admin out is a security feature?

  1. #1
    Join Date
    Aug 2005
    Beans
    Hidden!

    Regular user locking admin out is a security feature?

    Can someone please explain to me to how having the ability to lock an administrator (anyone who is a member of the local admin group) out of certain files on an NTFS partition on a local Windows XP machine is a security feature? Am I missing something or does this go completely against the notion that an admin has or should have full access to any user created file in the local file system? If this is true are there any other operating systems except Windows that have this feature?

  2. #2
    Join Date
    Jun 2006
    Location
    Switzerland
    Beans
    Hidden!
    Distro
    Kubuntu Jaunty Jackalope (testing)

    Re: Regular user locking admin out is a security feature?

    wouldn't that better be asked in a windows forum or in the windows section here?

  3. #3
    Join Date
    Dec 2005
    Location
    USA
    Beans
    886
    Distro
    Ubuntu

    Re: Regular user locking admin out is a security feature?

    Quote Originally Posted by blastus View Post
    Can someone please explain to me to how having the ability to lock an administrator (anyone who is a member of the local admin group) out of certain files on an NTFS partition on a local Windows XP machine is a security feature? Am I missing something or does this go completely against the notion that an admin has or should have full access to any user created file in the local file system? If this is true are there any other operating systems except Windows that have this feature?
    Anyone in the "Administrators" group, or who is "Administrator" will be able to access the file, even if the NTFS permissions are set to deny or are set so that the Administrator account is not listed.

    How?

    Ownership. Administrators can always change ownership of a file or folder. Changing ownership to himself will allow him to modify the permissions.

    I had to do that earlier this year at work...

    -Richard
    I use both Windows and Linux. Is that a crime? || Ubuntu User # 16597

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •