Stopping people from taking ownership of my batch file RRS feed

  • Question

  • Hi people,

    Got a task to run a certain CMD command on a number of PCs as administrator. So I thought i would create a batch file doing this. This is not the issue.

    The issue is that I am unable to lock down successfully so people cannot just edit the file to see the admin credentials. One of my colleges i have been testing this with is able to take ownership of the file and then he can do whatever he likes. 

    For context: the file is in a shared folder on my pc

    it is shared with everyone but only with read permssions

    security permissions for everyone is only traverse folder /execute and i have full control

    security share permissions are set for everyone to read, and administrators of my PC have full control.

    he is not an administrator on my pc.

    Windows 10

    Am I doing this right?

    Any help would be appreciated!


    Monday, July 16, 2018 11:28 AM