Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


boby55

1539 posts

Uber Geek

Trusted

#88517 17-Aug-2011 13:53
Send private message

A company we contract for has asked us for advice of this as one of the employees laid a complaint against their technician who they believe has changed settings just for that person.


Basically here is the story,

User1 (Who Laid Complaint) couldn't access a shared software network share,

User1 went to user 2 who could see it and went into folder permissions & saw user1 username listed with all denied security permissions. User2 tried to remove these buy got access denied.

User1 went to user3 who like user2 could see the folder and could see user1 had been locked out of that folder, he also couldn't change the permissions.

User1 complains to manager (First line of contact for company), Who gives user 1 a long speech about not pointing the blame etc.

Within an hour after that meeting, User1 Could view the folder again AND could now edit his own user permission to the folder. Whereas previously the only user who had access to change permissions was the administrator.


Basically what we have been asked is wither or not it is possible for the technician to change the security policy for that one user so that he now had permission to edit the folder permissions for himself.


The way I see it is that it is possible via active directory, Making the user a part of a security policy then changing that policy to allow this.

I am not 100% sure this is possible that is why I wanted to ask here for confirmation before I report back to the company.


For obvious reasons I have used USER1,2,2 and COMPANY :)

Create new topic
magu
Professional yak shaver
1599 posts

Uber Geek

Trusted
BitSignal
Lifetime subscriber

  #507930 17-Aug-2011 13:55
Send private message

Yes, that's easily doable. Deny permissions take precedence over Allow.




"Roads? Where we're going, we don't need roads." - Doc Emmet Brown

boby55

1539 posts

Uber Geek

Trusted

  #507934 17-Aug-2011 14:01
Send private message

That's what I thought. :)

Cheers for your help.

 
 
 
 


Privoxy
132 posts

Master Geek


  #507971 17-Aug-2011 14:55
Send private message

Seems a bit petty doesn't it?

But yes as already said, very easy and very possible.

boby55

1539 posts

Uber Geek

Trusted

  #507979 17-Aug-2011 15:06
Send private message

Privoxy: Seems a bit petty doesn't it?

But yes as already said, very easy and very possible.


Trust me, From what I've been told, This is behavior I would expect between 2 10 year olds

Aaroona
Human
2993 posts

Uber Geek

Subscriber

  #509901 22-Aug-2011 12:41
Send private message

Also worth noting, that this doesn't really have anything to do with group policy/security policy type things.. It's just simple folder permissions :) 





Create new topic




News »

Logitech introduce MX Anywhere 3
Posted 21-Sep-2020 21:17


Countdown unveils contactless shopping with new Scan&Go tech
Posted 21-Sep-2020 09:48


HP unveils new innovations for businesses adapting to rapidly evolving workstyles and workforces
Posted 17-Sep-2020 15:36


GoPro launches new HERO9 Black camera
Posted 17-Sep-2020 09:45


Telecommunications industry launches new 5G Facts website
Posted 17-Sep-2020 07:56


New Zealand ranks 3rd in world in GSMA index
Posted 15-Sep-2020 10:13


Trend Micro Security Suite adds web monitoring to prevent identity theft
Posted 14-Sep-2020 15:37


NVIDIA to acquire Arm for US$ 40 billion
Posted 14-Sep-2020 12:27


Epson launches its next gen A3+ colour EcoTank multi-function printer
Posted 10-Sep-2020 16:08


Sony launches three new native 4K SXRD home cinema projectors
Posted 9-Sep-2020 18:00


Catalyst Cloud brings Kubernetes-based open-source web hosting solution to market
Posted 9-Sep-2020 17:54


Verizon Connect eyes further growth in New Zealand
Posted 8-Sep-2020 09:26


PNY launches XLR8 gaming NVIDIA GeForce RTX 30 series powered by the all-new NVIDIA Ampere architecture
Posted 3-Sep-2020 16:39


NVIDIA delivers greatest-ever generational leap with GeForce RTX 30 Series GPUs
Posted 3-Sep-2020 16:17


Weta Digital advances visual effects and animation in the cloud with AWS
Posted 2-Sep-2020 17:09



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.