Answer the question
In order to leave comments, you need to log in
How to prevent changing the owner of a folder (NTFS)?
Why, with an explicit prohibition for the "Everyone" group to change the owner of the folder, this does not prevent any administrator on any machine from changing the owner to anyone and, accordingly, it becomes possible to change access rights as you like. Is there a way to bypass this?
Answer the question
In order to leave comments, you need to log in
How to prevent changing the owner of a folder (NTFS)?Remove administrator rights.
change of ownership is the last opportunity to restore access to a file or folder, it is available to the administrator in any case.
In general, I agree with the previous answerers.
I will add that it is possible to regulate who can and who cannot become the owner of an object forcibly with the help of the appropriate privilege, in English Windows it is called "Take ownership of files or other objects". By default, the Administrators group has this privilege, and no one else. You can find it in local security policies.
I do not recommend changing this setting, listen to the advice given.
There is.
Stop giving admin rights to everyone. Administrator rights for administrators, everyone else should not have them. It is impossible to be an administrator and not be one at the same time.
It is impossible to take away the administrator's ability to become the owner, if not.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question