Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




1539 posts

Uber Geek
+1 received by user: 39

Trusted

Topic # 88517 17-Aug-2011 13:53
Send private message

A company we contract for has asked us for advice of this as one of the employees laid a complaint against their technician who they believe has changed settings just for that person.


Basically here is the story,

User1 (Who Laid Complaint) couldn't access a shared software network share,

User1 went to user 2 who could see it and went into folder permissions & saw user1 username listed with all denied security permissions. User2 tried to remove these buy got access denied.

User1 went to user3 who like user2 could see the folder and could see user1 had been locked out of that folder, he also couldn't change the permissions.

User1 complains to manager (First line of contact for company), Who gives user 1 a long speech about not pointing the blame etc.

Within an hour after that meeting, User1 Could view the folder again AND could now edit his own user permission to the folder. Whereas previously the only user who had access to change permissions was the administrator.


Basically what we have been asked is wither or not it is possible for the technician to change the security policy for that one user so that he now had permission to edit the folder permissions for himself.


The way I see it is that it is possible via active directory, Making the user a part of a security policy then changing that policy to allow this.

I am not 100% sure this is possible that is why I wanted to ask here for confirmation before I report back to the company.


For obvious reasons I have used USER1,2,2 and COMPANY :)

Create new topic
1596 posts

Uber Geek
+1 received by user: 7

Trusted
BitSignal

  Reply # 507930 17-Aug-2011 13:55
Send private message

Yes, that's easily doable. Deny permissions take precedence over Allow.




"Roads? Where we're going, we don't need roads." - Doc Emmet Brown



1539 posts

Uber Geek
+1 received by user: 39

Trusted

  Reply # 507934 17-Aug-2011 14:01
Send private message

That's what I thought. :)

Cheers for your help.

 
 
 
 


132 posts

Master Geek
+1 received by user: 2


  Reply # 507971 17-Aug-2011 14:55
Send private message

Seems a bit petty doesn't it?

But yes as already said, very easy and very possible.



1539 posts

Uber Geek
+1 received by user: 39

Trusted

  Reply # 507979 17-Aug-2011 15:06
Send private message

Privoxy: Seems a bit petty doesn't it?

But yes as already said, very easy and very possible.


Trust me, From what I've been told, This is behavior I would expect between 2 10 year olds

2791 posts

Uber Geek
+1 received by user: 67


  Reply # 509901 22-Aug-2011 12:41
Send private message

Also worth noting, that this doesn't really have anything to do with group policy/security policy type things.. It's just simple folder permissions :) 





Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

NotPetya ransomware attack, New Zealand view
Posted 28-Jun-2017 15:07


Security concerns reach new peak, Unisys Security Index
Posted 27-Jun-2017 14:11


Behind Spark’s slow-burn 4.5G plan
Posted 26-Jun-2017 16:23


Red Hat unveils production-ready open source hyperconverged infrastructure
Posted 23-Jun-2017 22:10


Whatever ailed Vodafone broadband … seems to be fixed
Posted 23-Jun-2017 14:10


VMware NSX Meets Stringent Government Security Standards with Common Criteria Certification
Posted 22-Jun-2017 19:05


Brother launches next-generation colour laser printers and all-in- ones for business
Posted 22-Jun-2017 18:56


Intel and IOC announce partnership
Posted 22-Jun-2017 18:50


Samsung Galaxy Tab S3: Best Android tablet
Posted 21-Jun-2017 12:05


Wellington-based company helping secure Microsoft browsers
Posted 20-Jun-2017 20:51


Endace delivers high performance with new 1/10/40 Gbps packet capture card
Posted 20-Jun-2017 20:50


You can now integrate SMX security into Microsoft Office 365, Google and other cloud email platforms
Posted 20-Jun-2017 20:47


Ravensdown launches new decision-making tool HawkEye
Posted 19-Jun-2017 15:38


Spark planning to take on direct management of all consumer stores
Posted 19-Jun-2017 10:03


Qrious acquires Ubiquity
Posted 14-Jun-2017 12:21



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.