What are the access rights and privileges that control changing ownership of an object?
Changing the ownership of an object (typically a file) is not difficult in principle: You call the function with the new security descriptor. The hard part is getting to that point. (Thanks to John, a colleague in security, for correcting an earlier draft of this entry.) If you have access on an object, then you can change the owner of the...