There seems to be a process that changes the file ownership on my corporate Windows 7 laptop.
I have the same account name on two different domains, say
CORP\hemal. I login to my desktop using
CORP\hemal, the other account is disabled.
I noticed that several files on my machine are owned by
GLOBAL\hemal. In general this does cause any issue, I realized this only because
cygwin complained something about a directory not being safe for creating temp files.
So I changed the file owner to
CORP\hemal. A little later I got the error again and saw that the owner had changed back to
GLOBAL\hemal. So I changed the owner on two folders
C:\eclipse, which were both owned by the
CORP and wrote a small script to log their ownership. I confirmed that the onwership keeps getting changed by to
GLOBAL sooner or later.
So my questions are:
Are there any security processes on Windows 7 that would revert the file ownership in this fashion? It seems all files/directories owned by
CORPget changed to
Is there a way to identify the process that is making these changed? It doesn't seem like the filesystem watcher can do this, but I am wondering if there is way to make the ownership immutable and thereby get some error message from the offending process.