I am working on hardening my organization's win 2k advanced servers
Since the hardening attitude in my organization is close everything and then open whatever is needed , I thouhgt of canceling the CREATOR OWNER permission recursively
and open the permissions as follow
Administrators + System - Full contro
Authenticated users - Read + Execute
what was left out is the CREATOR OWNER full control on subfolders and files

ARE THERE ANY COMPLICATIONS I CAN SUFFER FROM WITH SUCH REGOROUS SETTING
thanks in advance
Niv.

I think creator/owner is required to use encryption and
quotas. Surely the creator needs full control of their
objects?!

>-----Original Message-----
>I am working on hardening my organization's win 2k
advanced servers.
>Since the hardening attitude in my organization is close
everything and then open whatever is needed , I thouhgt
of canceling the CREATOR OWNER permission recursively.
>and open the permissions as follow:
>Administrators + System - Full control
>Authenticated users - Read + Execute.
>what was left out is the CREATOR OWNER full control on
subfolders and files.
>
>ARE THERE ANY COMPLICATIONS I CAN SUFFER FROM WITH SUCH
REGOROUS SETTING ?
>thanks in advance,
>Niv.
>.
>