BuiltIn Administrators Group

[siptash]

Having an issue with folder/file permissions

 

I'm wanting to set explicit on a folder and subsequent files. When I create a new folder the permissions are inherited

 

Owner - Administrators

 

Creator Owner

SYSTEM

Administrator ([email protected])

Administrators

Users

 

I then set disable inheritance, remove all permission entries except Administrators & Administrator and add in the user.

 

The problem is other people can still assess the folder unless I remove the Administrators permission.

 

I'm sure leaving the Administrators permissions in shouldn't give all users access, where I'm I going wrong?

[jthompson]

I forget the terminology now ('restricted groups'?), but might you have a Group Policy object applied to your server that's adding groups or users into the local administrators group?