![]() If you do it this way, the file will be essentially indestructible to most users and even many administrators. You will need the following: psexec \\hostname -s -i %X cmd Modern windows installs will actually give a UAC style prompt and perform the ACL changes automatically if approved. Your ACL changes are failing because ownership is still assigned to the end user and the owner of a file is allowed to add themselves to the ACL entries of a file. Don't forget to also provide yourself with R/W access or you will need to double elevate back to the system account for any future changes. ![]() ![]() You may be able to prevent accidental deletion by giving ownership to system and providing the user with only explicit read access. You cannot prevent forced deletion of an item by a knowledgable administrator, however you can make it difficult for them.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |