Re: Should this work? - Folder permissions


"William Stokes" <will@xxxxxxxxxxxxx> wrote in message
news:esjjJfzeGHA.1792@xxxxxxxxxxxxxxxxxxxxxxx
Hello,

I was just banging my head against the wall with this. So. Should this
work and if not WHY?

We have folder (W2K server W2K native domain)

DATA -Folder not inheriting permissions

Users1 -Global group with Full access to DATA. Contains Users2 group.

Users2 -Global Group. Contains few domain user accounts and domain
admins group

Domain Admins -Contains administrators.

When I am on the local server as a Domain Administrator (member of Domain
Admins Group) shouldn't I have Full Access to the DATA folder?


Thanks for all tips!
-Will


If those are the only factors involved then yes Domain Admins would
have full access.
You have outlined: a folder with one grant on it of full control to
group Users1 and that does not allow any inheritance of permissions.
Since Users1 is the sum of all accounts members and/or account
members of groups that are members, recursively until you have a
collection of account members, and Domain Admins is included,
the single grant to Users1 would effect the grant for Domain Admins
account members.


.

Relevant Pages

  • RE: Unable to Change Folder Security from Workstation
    ... I suspect the folder you tried to modify ACL is on the file server. ... Create a new User account with domain admins privilege in domain to test ... Try to modify ACL on the workstation to see if there are any problems. ...
    (microsoft.public.windows.file_system)
  • Re: Assigning permissions to users
    ... would like to assign folder permissions to various groups. ... Only Domain Admins have right to add or delete ... Also below Administration is a folder called Forms. ... Authenticated Users: C ...
    (microsoft.public.win2000.active_directory)
  • Re: Security Entries for "My Documents" folders .
    ... The permission for the Users Shared Folder ... Domain Admins Full Control ... Data, Read Permissions ... Domain Admins, Domain Users, SBS Folder Operators: ...
    (microsoft.public.windows.server.sbs)
  • Re: Read Only Files
    ... Check the permission of the folder to see if the administrator is ... > Domain Admins Full Control ... > Domain Admins, Domain Users, SBS Folder Operators: ... > Online Partner Support ...
    (microsoft.public.windows.server.sbs)