WinSecWiki > Security Settings > Local Policies > Security Options > System Objects > Default Owner For Objects Created by Members of The Administrators Group
System Objects: Default Owner For Objects Created by Members of The Administrators Group
Normally when you create an object your user account becomes the owner of the object. This setting if configured to “Administrators group” changes the default ownership assignment for objects created by any administrator so that any such object is now owned by the Administrators group rather than the individual user.
Bottom line
Leave this enabled by default. There’s no point in trying to restrict access between administrators since they all ultimately can take ownership of any object on the entire system.
Back to top