Domain Admins Changing File Permissions

Home Forums Server Operating Systems Windows Server 2008 / 2008 R2 Domain Admins Changing File Permissions

Viewing 1 post (of 1 total)
  • Author
    Posts

  • todd231
    Participant
    #166673

    I’m fairly certain there’s a way for me to check to see if a domain admin changed permissions on a file. I just don’t know what to specifically look for. I’m looking through my log files and can’t pin point anything. This is my scenario…

    User A has domain admin rights which was given for her job as a software package admin. This was done prior to me being here and I’m not sure if she still needs it.
    User B is in our Payroll dept and needs access to a certain spreadsheet in a locked down folder.
    I granted User B full access to that folder by putting her in a security group that has full access. I then granted her full access to that specific file. She was able to access it for about a month.

    Two days ago, User B contacts me and says “I no longer have access to that spreadsheet, I get this error (insert permissions error).
    I logged in and granted her access that night.
    She tried to access it last night and got the same error.
    I went and checked permissions and her name is gone from the permissions list.

    I just granted her full access permissions for that file and she can access it as of this point.

    What I think is going on is this; User A is logging in and changing permissions for some reason. (I know the reason but I won’t bore ya’ll with it).

    I’ve got to be able to prove that is what she’s doing. I know it can be done, like I said, I just don’t know what to look for and in what log file.

    Any help, my masters?

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.

External Sharing and Guest User Access in Microsoft 365 and Teams

This eBook will dive into policy considerations you need to make when creating and managing guest user access to your Teams network, as well as the different layers of guest access and the common challenges that accompany a more complicated Microsoft 365 infrastructure.

You will learn:

  • Who should be allowed to be invited as a guest?
  • What type of guests should be able to access files in SharePoint and OneDrive?
  • How should guests be offboarded?
  • How should you determine who has access to sensitive information in your environment?

Sponsored by: