Re: NTFS permissions

From: Brian (brian.l.keenan@l-3com.com)
Date: 10/31/02 

From: "Brian" <brian.l.keenan@l-3com.com>
Date: Thu, 31 Oct 2002 09:23:32 -0800

>-----Original Message-----
>If you have no permissions set other than the allowed
group on a folder
>or share, it should restrict the groups appropriately.
>
>In other words, don't deny the users access, just don't
include them in
>the ACL at all.
>
>Dan
>
>Brian wrote:
>> I would like to set up an application folder that
denies
>> access to all users by default, and grants access only
to
>> a special group. (Kinda like a firewall)
>>
>> I tried denying to the Users group, and found that I
>> effectivly remove permissions for everyone, even Admin.
>>
>> I found I can set up a Deny group, but that is not the
>> security model I am looking for. The app is a secure
app
>> and really only should grant access to seleced
>> users/groups and deny access to all others.
>>
>> Any ideas?
>>
>> -Thanx
>> Brian
>
>
>.
>

Problem is that I cannot change the RWX permissions for
the Users group, they are granted and greyed out, and
denying had unintended side effects. I would like to
remove these permissions.

Note: I tried to modify who was in the Users group with
other side effects. There is a built in Interactive that
has been causing some confusion, and others. I would like
to know who/what built ins need to be where
(Administrators, Special Access, Users) to make this
happen.

Thanx
-Brian

Relevant Pages

  • Re: NTFS permissions
    ... If you have no permissions set other than the allowed group on a folder ... > I found I can set up a Deny group, ... The app is a secure app ...
    (microsoft.public.win2000.security)
  • Re: folder permissions
    ... groups and something about deny over rides allow. ... groups assigned to this one folder and the same user has diff priv's ... permissions, everyone has full control. ...
    (microsoft.public.windows.server.general)
  • Re: file permissions
    ... The original tools have a rudimentary Deny, ... I grant everything that I can to This folder, subfolders and file on the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: hide folder and file to users without permissions
    ... You're using "deny". ... > and change subfolder1 to allow reading for group1, ... > I can change the setting individually for each folder, ... > except the one subfolder for group1. ...
    (microsoft.public.windows.server.general)
  • Re: Sample security Code is not working!
    ... DL1: Deny ... If i consider anonymous as a DL, ESM breaks! ... what do you mean with odd mask and even mask? ... > the folder, I can update folder but getting 'Window handle exception'> when ...
    (microsoft.public.exchange2000.development)