Disabling Security Property Page

As a Windows system administrator, you may often want to set permissions on files. In general, the method we often take is in the Explorer's property page. Configure it in the security options, or use the command line to configure (cacls or xcacls, the former is the Windows system comes with, the latter is slightly more powerful, provided for the Resource Kits).

Unfortunately, when we configure the file permissions of one server, it may be improperly set due to its own mistakes, or another administrator (Windows rookie) on the server will you Hard work is a must, this time, you may feel the need to hide the security options, so as to avoid some idle people, especially for a file server, the file server only allows others to share via file, FTP access, only you You can log in locally on the file server. But there are a lot of administrators in the domain who can take ownership of files through file sharing and access things they shouldn't have access to. So, now I teach you a way to make other administrators unable to pass the resource manager. To manage the permissions of a folder.
Example:

You are the Administrator, there is another administrator called Admin. If I don't want Admin to set the security attribute of the file in the resource manager, then we only need to %systemroot% System32 shx32.dll permissions settings, by default, the
file permissions are:

BUILTINAdministrators: F
Everyone:R
BUILTINPower Users:R
NT AUTHORITYSYSTEM:F
BUILTINUsers:R

If we run cacls %systemroot%system32 shx32.dll /d admin
then the admin user will not be able to access files or folders in the Explorer after logging in to the server. Make security settings. If we set the permissions of the cacls.exe file to make the admin user inaccessible, then he can only copy a cacls.exe from another server to set permissions on the file...