Re: Allowing user access to one single file in a folder.

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 03/29/05

  • Next message: Angus Chen: "RE: Domain Admins can't manage computers"
    Date: Tue, 29 Mar 2005 01:31:41 -0700
    
    

    What is in the long run most simple is to use a new folder
    for this, as over time you will have more such files, or you
    will forget that there is a unique file within the folder.

    However, what you can do is use the fact that an explicit
    grant takes control over an inherited deny.
    So, if you want all Users to have Full control for all of the
    files in the folder, except for UserX who is a member of
    Users, then you could
    Grant Full for Users
    Deny Full for UserX and use the advanced tab to set this
    ACE to apply to Files Only
    Then, on the file where UserX should be able to read
    edit the permission of that file and Grant UserX what
    access that account should have for the file.

    -- 
    Roger Abell
    Microsoft MVP (Windows  Security)
    MCSE (W2k3,W2k,Nt4)  MCDBA
    "Angryblack" <Angryblack@discussions.microsoft.com> wrote in message
    news:BE49884F-810F-4FD0-B8FD-81E5CDB533A6@microsoft.com...
    > I know this sounds simple and i feel the same way however I am trying to
    make
    > a request happen from one of our users.  He would like someone given
    access
    > to only one file in a folder.  Access to the folder is controled by groups
    > and users are given full control of the files at the folder level.  This
    is
    > the first request to allow someone only access to a single file.
    >
    > Thanks in advance.
    

  • Next message: Angus Chen: "RE: Domain Admins can't manage computers"

    Relevant Pages

    • RE: DST update for Exchange 2003 and Outlook 2003
      ... When you use the Roaming Profile and Folder ... Click Services tab and select Hide All Microsoft Services and Disable ... CREATOR OWNER: Full Control ... Open Windows explorer, navigate to ...
      (microsoft.public.exchange.admin)
    • RE: FindControl() on ASP.NET UserControl Objects
      ... STeven, when I look in the code-behind for the user control, despite the fact ... that the control is in a folder named "Controls", ... your ascx usercontrol put. ... Microsoft MSDN Online Support Lead ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Data disappearing - without apparent cause
      ... > table that is the form's control source). ... Note that it is not envisaged that users will change the folder ... the users see a visible textbox control contaning the path and whether they ... check this is not null before you proceed with the mailmerge routine. ...
      (comp.databases.ms-access)
    • Re: Roaming Profiles prevent Folder redirect from working
      ... The FOLDER REDIRECT is where the snag is. ... Check the NTFS permission and share folder permissions of the ... CREATOR OWNER: Full Control ...
      (microsoft.public.windows.server.sbs)
    • RE: Linked Group Policy Objects
      ... If you select Redirect all My documents folders to the default location, ... My Documents to a network folder, input the location and then click OK. ... Please also check the NTFS permission and share folder permissions of the ... CREATOR OWNER: Full Control ...
      (microsoft.public.windows.server.sbs)