Hi Guys, im one of the adminsitrators where i work, and i have been asigned the task to check that the tier1 team when create folders and set permissions on the file server they can not uncheck permission for the local administrator account. is in a Win 2k8 server. Thanks.

Hello, you have to give them Deny permission for Change Permissions on NTFS. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified IT Professional: Enterprise Administrator

Hi, Mr X is right. You may refer to the following Microsoft KB article for more information regarding file permissions. How to set, view, change, or remove special permissions for files and folders in Windows XP http://support.microsoft.com/kb/308419 Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, Thnaks for your answer but i have a question about that. if i deny for them the "change permissions, if they create a share folder for a user or a group can they give them permissions for it and without removing local admin checks?? Thanks