Re: Effective permission - folders

OK, with that clarification, and assuming that these settings
are either all explicit or all inherited whereever they appear . . .

Any account in group hate_these_users will have no access
Members of admins not in hate_these_users will have full control
Members of users not in hate_these_users and not in admins
will have change only

--
Roger Abell
Microsoft MVP (Windows Server : Security)

<milosnik.boczku@xxxxxxxxx> wrote in message
news:1145456982.483399.106470@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Sorry my bad. Once again:

Folder "e:\test"

permissions:
users: Allow: change,
admins: Allow: full access,
hate_these_users: Allow: Read; Deny: Full Control, Modify, Write

Thanks,
MB



.

Relevant Pages

  • Re: Rid AD of Circular Group Membership
    ... and have use on members if it is used there. ... Administrators group is still intact), nor do they have empowerments over ... Admins is being used for by the 30+ can be delegated I(ex. ... The quess is each has an account and uses it, ...
    (microsoft.public.windows.group_policy)
  • Re: Problem managing accounts in protected groups
    ... we have two domain admins: ... that someone will give more security permissions to users then to the admins. ... I think you have realized that the account management group is able to reset ... Most members of OU A are either members of Domain ...
    (microsoft.public.windows.server.active_directory)
  • RE: Help: SBS 2003 Exchange Send As permissions not working (and disappearing!)
    ... It seems to be related to the AD AdminSDHolder resetting the permissions ... 318180 AdminSDHolder Thread Affects Transitive Members of Distribution ... Schema Admins ... You have mentioned that one account can work well with "send as". ...
    (microsoft.public.windows.server.sbs)
  • RE: Help with Exchange Send As permissions not working and disappearing (SBS 2003)
    ... Thanks for using SBS newsgroup! ... 318180 AdminSDHolder Thread Affects Transitive Members of Distribution ... Schema Admins ... You have mentioned that one account can work well with "send as". ...
    (microsoft.public.windows.server.sbs)
  • Re: Single User/Multiple Domain Authority Delegation
    ... For example, by default, Enterprise Admins and Domain Admins are members of the Administrators group in each domain. ... By virtue of being members of Administrtors group, both of these groups would normally be able to logon and administer any domain. ... members of the Administrators group on Domain Controllers have the rights required to logon to the Domain Controller remotely. ... When the 'useradmin' account is granted EnterpriseAdmin ...
    (microsoft.public.windows.server.active_directory)
Quantcast