-

From: Brian (brian.l.keenan@l-3com.com)
Date: 10/31/02


From: "Brian" <brian.l.keenan@l-3com.com>
Date: Thu, 31 Oct 2002 12:00:19 -0800


Thank You
>-----Original Message-----
>Sounds like it is inheriting the permissions from the
parent folder.
>Uncheck the box in the security properties for Allow
inheritable
>permissions... (blah blah blah). You should be prompted
to either copy
>or remove the current ACL. Just remove it, then add your
desired ACL.
>
>Dan
>
>Brian wrote:
>>>-----Original Message-----
>>>If you have no permissions set other than the allowed
>>
>> group on a folder
>>
>>>or share, it should restrict the groups appropriately.
>>>
>>>In other words, don't deny the users access, just don't
>>
>> include them in
>>
>>>the ACL at all.
>>>
>>>Dan
>>>
>>>Brian wrote:
>>>
>>>>I would like to set up an application folder that
>>>
>> denies
>>
>>>>access to all users by default, and grants access only
>>>
>> to
>>
>>>>a special group. (Kinda like a firewall)
>>>>
>>>>I tried denying to the Users group, and found that I
>>>>effectivly remove permissions for everyone, even Admin.
>>>>
>>>>I found I can set up a Deny group, but that is not the
>>>>security model I am looking for. The app is a secure
>>>
>> app
>>
>>>>and really only should grant access to seleced
>>>>users/groups and deny access to all others.
>>>>
>>>>Any ideas?
>>>>
>>>>-Thanx
>>>>Brian
>>>
>>>
>>>.
>>>
>>
>>
>> Problem is that I cannot change the RWX permissions for
>> the Users group, they are granted and greyed out, and
>> denying had unintended side effects. I would like to
>> remove these permissions.
>>
>> Note: I tried to modify who was in the Users group with
>> other side effects. There is a built in Interactive
that
>> has been causing some confusion, and others. I would
like
>> to know who/what built ins need to be where
>> (Administrators, Special Access, Users) to make this
>> happen.
>>
>> Thanx
>> -Brian
>>
>
>
>.
>



Relevant Pages

  • Re: NTFS permissions
    ... Sounds like it is inheriting the permissions from the parent folder. ... (blah blah blah). ... >>>I tried denying to the Users group, ...
    (microsoft.public.win2000.security)
  • Re: Copy secured database to include security
    ... "P.S. Do NOT assign permissions to users... ... The problem with leaving permissions assigned to the default Users group is ... You can't delete the Admin user, nor can you remove Admin from the Users ... I'm learning that getting user level security right is NOT a one-shot ...
    (microsoft.public.access.security)
  • RE: SBS 2003 RWW not working
    ... I understand the issue to be: you can not access RWW ... > certificate and then type the public FQDN that you will use to access RWW ... Full Control (inherited from the parent folder) ... > Data, Read Attributes, Read Extended Attributes, Read Permissions ...
    (microsoft.public.windows.server.sbs)
  • Re: would it be wise???
    ... ...."Some permissions I allowed to the users group, because they are necessary for all ... This includes zero permissions on the Database ... By giving any permissions to the Admin User or the Users Group, ...
    (microsoft.public.access.security)
  • Re: Users Group and User Permissions
    ... You need to ensure that the Users Group has NO permissions. ... you did not delete the Admin user - that is impossible. ... Do they need any permissions for the query itself? ...
    (microsoft.public.access.security)