I have a workstation (XP Pro SP2) authenticated to a domain that has three
users in the Administrators group.

There is a root level folder that goes several levels deep beyond that.

All users within the Administrators group require access to this folder.

I have gone into the Advanced tab and verified Administrators have Full
Control on that particular folder.

I went into the Owner tab and set "Current owner of this item" to
Administrators and checked "Replace owner on subcontainers and objects."

I selected and applied "Replace permission entries on all child objects with
entries shown here that apply to child objects."

I realize permissions and ownership are two different things.

Here is the problem:

There is a program that the three individuals run that writes files into
this folder.

When one individual is logged onto the workstation the files are created and
the ownership is set to that particular person for the created files.

Is there a way for ownership to be inherited? Also, permissions are not
being inherited which has me stumped.

Go Start-run, secpol.msc
Look for
System Objects: Default owner for objects created by members of teh
Administrators Group

Set it to Administrators group.

To figure out the inheritance problems, what are the inheritance settings on
the top-level parent folder?

--
Chris Weber
Security MVP


"Brian Elkins" <BrianElkins@discussions.microsoft.com> wrote in message
news:E29FD17E-08B9-4F24-B821-36E96CD52779@microsoft.com...
>I have a workstation (XP Pro SP2) authenticated to a domain that has three
> users in the Administrators group.
>
> There is a root level folder that goes several levels deep beyond that.
>
> All users within the Administrators group require access to this folder.
>
> I have gone into the Advanced tab and verified Administrators have Full
> Control on that particular folder.
>
> I went into the Owner tab and set "Current owner of this item" to
> Administrators and checked "Replace owner on subcontainers and objects."
>
> I selected and applied "Replace permission entries on all child objects
> with
> entries shown here that apply to child objects."
>
> I realize permissions and ownership are two different things.
>
> Here is the problem:
>
> There is a program that the three individuals run that writes files into
> this folder.
>
> When one individual is logged onto the workstation the files are created
> and
> the ownership is set to that particular person for the created files.
>
> Is there a way for ownership to be inherited? Also, permissions are not
> being inherited which has me stumped.

Chris,

Thank you! That took care of it plus you're the only one who truly
understood what I was asking.

Brian

"Chris Weber [Security MVP]" wrote:

> Go Start-run, secpol.msc
> Look for
> System Objects: Default owner for objects created by members of teh
> Administrators Group
>
> Set it to Administrators group.
>
> To figure out the inheritance problems, what are the inheritance settings on
> the top-level parent folder?
>
> --
> Chris Weber
> Security MVP
>
>
> "Brian Elkins" <BrianElkins@discussions.microsoft.com> wrote in message
> news:E29FD17E-08B9-4F24-B821-36E96CD52779@microsoft.com...
> >I have a workstation (XP Pro SP2) authenticated to a domain that has three
> > users in the Administrators group.
> >
> > There is a root level folder that goes several levels deep beyond that.
> >
> > All users within the Administrators group require access to this folder.
> >
> > I have gone into the Advanced tab and verified Administrators have Full
> > Control on that particular folder.
> >
> > I went into the Owner tab and set "Current owner of this item" to
> > Administrators and checked "Replace owner on subcontainers and objects."
> >
> > I selected and applied "Replace permission entries on all child objects
> > with
> > entries shown here that apply to child objects."
> >
> > I realize permissions and ownership are two different things.
> >
> > Here is the problem:
> >
> > There is a program that the three individuals run that writes files into
> > this folder.
> >
> > When one individual is logged onto the workstation the files are created
> > and
> > the ownership is set to that particular person for the created files.
> >
> > Is there a way for ownership to be inherited? Also, permissions are not
> > being inherited which has me stumped.
>
>
>