Re: Users cannot access certain files!!!

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 03/19/05

  • Next message: Joe Richards [MVP]: "Re: Null Session Fix not working on Domain Controllers" 
    Date: Fri, 18 Mar 2005 23:09:44 -0700

    Perhaps you set Deny for more than you have said,
    maybe Users group (?) instead of "a user"
    Remove the Deny to reverse this effect.
    You may need to take ownership, but likely only
    need to adjust the NTFS permissions (as it is already
    owned).
    Then, as a best practice, set Grant permissions that
    allow what is needed, avoiding use of Deny unless
    there is no alternative. Deny overrides any Grants,
    so if you Deny a group and that group contains your
    admin accounts, the admins will not have access. 

    -- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"HIVOLTG" <HIVOLTG@discussions.microsoft.com> wrote in message
news:257A2FAA-8FDC-4879-A9DA-7D602FBACB36@microsoft.com...
> A user was explicitley denied access to a specific folder. A warning
message
> appeared saying that this action could have adverse affects. Now users
cannot
> access the files in this folder. Not even administrator. How can I fix
this?
  • Next message: Joe Richards [MVP]: "Re: Null Session Fix not working on Domain Controllers"

    Relevant Pages

    • Re: Cant access DNS MMC in AD
      ... I have denied ALL to ALL groups in the DNS in AD. ... deny settings, but I can't get back in. ... You should remove yourself from any group you have set the Deny permissions ... Domain group that you have not set Deny on, this may mean creating a new ...
      (microsoft.public.windows.server.dns)
    • Re: Cant access DNS MMC in AD
      ... server in the DNS MMC. ... deny settings, but I can't get back in. ... Domain group that you have not set Deny on, this may mean creating a new ...
      (microsoft.public.windows.server.dns)
    • Re: folder permissions
      ... groups and something about deny over rides allow. ... groups assigned to this one folder and the same user has diff priv's ... permissions, everyone has full control. ...
      (microsoft.public.windows.server.general)
    • Re: file permissions
      ... The original tools have a rudimentary Deny, ... I grant everything that I can to This folder, subfolders and file on the ...
      (microsoft.public.windowsxp.security_admin)
    • Re: hide folder and file to users without permissions
      ... You're using "deny". ... > and change subfolder1 to allow reading for group1, ... > I can change the setting individually for each folder, ... > except the one subfolder for group1. ...
      (microsoft.public.windows.server.general)