Last night I learn that...
1. FULL CONTROL in NTFS file security does mean something.
It allows the passing of the file OWNERSHIP!
Hence we should never tick the FULL CONTROL of any file or directory.
The change of ownership of any files or folder is a terrible practice from audit standpoint.
2. EFS - Encrypting File Systems is a way to protect the files but can get very tricky and you could lose the access to recover the files if you forget the encryption key.
No comments:
Post a Comment