Re: NTFS Permissions

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 09/12/05


Date: Mon, 12 Sep 2005 08:09:59 -0700

It depends on whether you have changed the grants of the
User Right to Bypass traverse checking.
If members that should get to .\sub2 do have this right then
there is no problem as long as they do a deep mapping that
goes directly to the .\sub2, as they will not be able to browse
to it.
If you want them able to browse to it, they need at least
list on .\share1 and .\sub1
If they do not have Bypass traverse checking enabled then
they need these NTFS grants of list all the way from .\sub1
on up to the drive root itself
"Andrew" <Andrew@discussions.microsoft.com> wrote in message
news:72DC76D7-5CC6-46A0-A0DC-879B6BBB3F21@microsoft.com...
> We are running a windows 2000 Active Directory environment. I am trying to
> give a security group read permissions to a folder, but they don't have
> any
> permissions in the parent.
>
> They have rights to:
>
> \\server\share1
>
> The have NO rights to:
>
> \\server\share1\sub1
>
> I want them to be able to browse and have read rights to:
>
> \\server\share1\sub1\sub2
>
> Is this possible?
>
> Thanks,
> Andrew



Relevant Pages

  • Re: Bypass Traverse Checking Issue
    ... thanks for your response, this does make sense now, adding list rights to ... A user needs the list folder contents permission on the ... What Bypass Traverse Checking basically means is "Forget about ... > traverse directory trees even though the user may not have permissions on ...
    (microsoft.public.windows.server.active_directory)
  • Re: delegate message "on behalf of"
    ... Send As grants no particular rights to individual folders in the ... circulation in the Exchange groups - even amongst some of the other Exchange ... >> of Jane Doe on behalf of Joe Bloggs. ...
    (microsoft.public.outlook)
  • Re: BBC Sales Job
    ... precise legal meanings out of context and claim it grants the BBC ... effectively grants the BBC all rights. ...
    (uk.media.tv.misc)
  • Re: delegate message "on behalf of"
    ... Send As grants no particular rights to individual folders in the ... >> If you grant the user Send As rights on the server, ... >> of Jane Doe on behalf of Joe Bloggs. ...
    (microsoft.public.outlook)
  • Re: BBC Sales Job
    ... precise legal meanings out of context and claim it grants the BBC ... effectively grants the BBC all rights. ...
    (uk.media.tv.misc)