Re: Permissions Question

From: Steven L Umbach (sumbach55_at_ameritech.net)
Date: 11/06/03 

Date: Thu, 06 Nov 2003 14:15:11 GMT

Keep in mind than an explicit allow will override an inherited deny, and it
is possible to configure permissions that way where the inherited deny box
will be checked and grayed and you can still check allow. --- Steve

"Vj" <vijayrathee@hotmail.com> wrote in message
news:0a9701c3a437$f4085850$a101280a@phx.gbl...
> Hey Kurt,
>
> Yes, you are on the right track. When there is a conflict
> between the NTFS permissions then the "least restrictive"
> permissions take effect. But since Deny is an exception to
> the rule, It overrides any other permission. So in case
> you select Everyone Full control- Allow and Everyone Full
> Control - Deny(It shouldnt allow you to actually :-)) )
> Deny overrides all other permissions.
>
> Cheers
> Vijay Rathee
> MCT
> >-----Original Message-----
> >I am just learning, and am confused on this issue. When
> assigning
> >permissions, there are the Allow and Deny checkboxes. I
> understand if
> >I choose deny that overrides everything, but is leaving
> both Allow and
> >Deny the same as applying Deny? If not, could someone
> please explain
> >the difference to me?
> >
> >Thanks, Kurt
> >.
> >

Relevant Pages

  • Re: how to restrict users to search in their own Organizational Unit
    ... I also want to say that in fact you shouldn't deny the read permission to anyone and this scenario the MOSS Administrators or who is responsible for Add users to Your Sites should be carefull when performing this action. ... Now, because you're dealing with many users, my recommendation is to create THE NECESARY Security Groups in each OU and related them with your MOSS2007 existing security groups, in future when someone creates some user, you just have to add that user to the necessary group and that user will be given the necessary permissions. ... decided a script can make it possible to accomplish, ... > If I need to create a security group per OU and then add all users ...
    (microsoft.public.windows.server.active_directory)
  • Re: Share Permissions: Deny behaviour
    ... Deny overrides all other permissions. ... There are two types of Deny (again goes for share and NTFS). ... explicit allow permission, then you're stuck with implicit deny. ...
    (microsoft.public.windows.server.general)
  • Re: how to restrict users to search in their own Organizational Unit
    ... decided a script can make it possible to accomplish, ... You could also TRY removing the "Authenticated Users" ... Domain level since using a lot of DENY ... permissions is in and of itself a poor practice. ...
    (microsoft.public.windows.server.active_directory)
  • Re: NTFS Security Question.
    ... I was not sure that deleting the special permissions would work but you ... Since Windows 2000 deny NTFS permission does not work ... originally configured "closer" to the object in the chain of folders. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: 70-290, properly answering access permission questions
    ... Maybe this is not something covered in the core exams. ... Inherited Deny permissions do not prevent access to an object if the ...
    (microsoft.public.cert.exam.mcse)
Quantcast