Re: NTFS permissions

From: Daniel Angelucci (angelucc@nospam.duke.edu)
Date: 10/31/02


Date: Thu, 31 Oct 2002 11:58:46 -0500
From: Daniel Angelucci <angelucc@nospam.duke.edu>


If you have no permissions set other than the allowed group on a folder
or share, it should restrict the groups appropriately.

In other words, don't deny the users access, just don't include them in
the ACL at all.

Dan

Brian wrote:
> I would like to set up an application folder that denies
> access to all users by default, and grants access only to
> a special group. (Kinda like a firewall)
>
> I tried denying to the Users group, and found that I
> effectivly remove permissions for everyone, even Admin.
>
> I found I can set up a Deny group, but that is not the
> security model I am looking for. The app is a secure app
> and really only should grant access to seleced
> users/groups and deny access to all others.
>
> Any ideas?
>
> -Thanx
> Brian



Relevant Pages

  • Re: NTFS permissions
    ... >If you have no permissions set other than the allowed ... group on a folder ... >> I found I can set up a Deny group, ... The app is a secure ...
    (microsoft.public.win2000.security)
  • Re: folder permissions
    ... groups and something about deny over rides allow. ... groups assigned to this one folder and the same user has diff priv's ... permissions, everyone has full control. ...
    (microsoft.public.windows.server.general)
  • Re: file permissions
    ... The original tools have a rudimentary Deny, ... I grant everything that I can to This folder, subfolders and file on the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: hide folder and file to users without permissions
    ... You're using "deny". ... > and change subfolder1 to allow reading for group1, ... > I can change the setting individually for each folder, ... > except the one subfolder for group1. ...
    (microsoft.public.windows.server.general)
  • Re: Sample security Code is not working!
    ... DL1: Deny ... If i consider anonymous as a DL, ESM breaks! ... what do you mean with odd mask and even mask? ... > the folder, I can update folder but getting 'Window handle exception'> when ...
    (microsoft.public.exchange2000.development)