[Duane]

On a NAS with 2003 Appliance we want to prevent the users from changing the
security settings on the folders by either not displaying the security tab
but preferably through a GPO that would not allow them to change the security
settings of the folder. We have tried to do it as a local GPO to prevent
changing attributes but this does not work. Can someone please help?

[Steven L Umbach]

If the user does not have full control, change permissions special
permission, or is not the owner of a file/folder they will not be able to
change permissions assuming that they are not local administrators. You
might be able to use Group Policy to hide the security tab but that will not
prevent users from changing permissions at the command line if they have the
ability to do such and know how to. For Group Policy look under user
configuration/administrative templates/Windows components/Windows Explorer -
hide the security tab. The links below may also be of help. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;193826
http://support.microsoft.com/default.aspx?scid=kb%3ben-us%3b303153

"Duane" <Duane@discussions.microsoft.com> wrote in message
news:62E980DA-CB05-4271-9451-F0E4BE10C23A@microsoft.com...
> On a NAS with 2003 Appliance we want to prevent the users from changing
> the
> security settings on the folders by either not displaying the security tab
> but preferably through a GPO that would not allow them to change the
> security
> settings of the folder. We have tried to do it as a local GPO to prevent
> changing attributes but this does not work. Can someone please help?

[Duane]

"Steven L Umbach" wrote:

> If the user does not have full control, change permissions special
> permission, or is not the owner of a file/folder they will not be able to
> change permissions assuming that they are not local administrators. You
> might be able to use Group Policy to hide the security tab but that will not
> prevent users from changing permissions at the command line if they have the
> ability to do such and know how to. For Group Policy look under user
> configuration/administrative templates/Windows components/Windows Explorer -
> hide the security tab. The links below may also be of help. --- Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;193826
> http://support.microsoft.com/default.aspx?scid=kb%3ben-us%3b303153
>
Steven,
Thank you for your response, we actually found it as I got your reply. The
issue is that the shares are the users folders but insted of setting share
permissions they change the security permissions and mess things up. They
can't log on locally so your suggestion actually works for us.