Re: Permissions Question

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 11/27/04

  • Next message: Roger Abell: "Re: NTFS File Permissions." 
    Date: Sat, 27 Nov 2004 10:19:04 -0700

    One may do this by using the Advanced view in the NTFS
    premissions editor. The share level permissions will have
    to allow Change for them, an apparent overallocation, but
    the NTFS will restrain.
    Suppose it is to CustomGrp you want this granted.
    You would grant share level Change to CustomGrp.
    Then, in the NTFS permissions dialog, grand Modify to it,
    and then click Advanced, locate the Modify grant and click
    to highlight it, then click to edit it. In the detail view dialog
    that opens use the dropbox for what the grant applies to so
    that it is changed to Files Only. Apply and OK to get back
    to the generic permissions view, where now the CustomGrp
    grant is special without the checkboxes it had before. Now,
    click to highlight this CustomGrp grant and check List.
    Make sure there is no higher grant of NTFS permissions to
    any group that includes a member of CustomGrp.
    You should now have what you were after. 

    -- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
<jswain@mindspring.com> wrote in message
news:u$uFM2I1EHA.3408@tk2msftngp13.phx.gbl...
> I want to restrict permissions to create folders on a shared folders on a
> windows 2003 sever but I do not want to restrict append data
>
>
> any suggestions will be appreciated
>
>
> John
>
>
>
>
>
  • Next message: Roger Abell: "Re: NTFS File Permissions."

    Relevant Pages

    • Re: USERS group has the ability to change security permissions???
      ... Please use the Advance view in the NTFS permissions dialog to ... When there is a generic grant and a special grant to the same entity ... the RESULT: user level access can change NTFS ...
      (microsoft.public.win2000.security)
    • Re: share permissions -- how to?
      ... that, then allow a set of groups to upload files to but not delete, ... access to shares that have their storage on NTFS. ... The share permissions are no where near as granular as ... grant Read to such as Domain Users or Authenticated ...
      (microsoft.public.win2000.security)
    • Re: Network shares not getting the correct permissions
      ... No need to grant change to everyone. ... Share permissions not NTFS permissions. ... members of the domain users group. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Groups and Folder Access
      ... when I go to the folder and attempt to give the group ... > grant priveleges to the MDR2000 group, ... using the word "Folder" when discussing Permissions ... and File permissions when speaking of the NTFS permissions ...
      (microsoft.public.windows.server.active_directory)
    • Re: FTP control
      ... > I would like to use NTFS security settings to control who ... I would suggest getting a third party FTP server, ... if you set quota and these permissions for that group you can ... Information Server (IIS) Web site, ...
      (microsoft.public.win2000.security)