Re: NTFS Permission

There can be a couple of reasons.

First, which domain is which, from where the user accesses
the share, etc. are all immaterial here. Rather what is important
is that the user can access the share (hence the domains all have
agreed the user is allowed), and what settings exist on the share
and on the storage relative to the account used and the groups
that account is in.

Now, delete.
It can depend on how the permissions are set on the storage.
An explicit (not inherited) grant will overrule an inherited deny.
So, say the Deny is on the parent of the containing folder, but
there is a grant to RemoteDomainUsers set on the actual
containing folder where RemoteDomainUsers is a group that
includes the test account.
Also, there is an old Posix compliance requirement that a
contained item must be deletable if full permissions exist on
the containing item that might be coming into play.
Finally, you say there is a deny of delete, but it is not clear
whether that deny exists on the file being deleted (i.e. it may
exist on the containing folder but not be set to inherit onto
contained files; or, the file may have been moved into the
folder from elsewhere within the same partition).

So, it is not possible to answer your question with only the
information provided as we do not know the precise settings
on the folder, etc..

"Martin" <hasnews@xxxxxxxxxxx> wrote in message
news:1145628251.963193.213920@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi

I'm using Windows 2000 Server with AD (mixed Mode)
The user is registred on the server as domain user.
The user is loged in an other domain with the same init and password
The user is not administrator on his local computer and the other
domain.
The user has access on the files over a mapped drive with his init and
password.

Why the user can delete a file if the permission of the file is set
"Delete denied"?

Regards
Martin



.

Relevant Pages

  • Re: NTFS Security Question.
    ... A subordinate object DOES not inherit the PARENT perms (in ... will assume "Nebulous" permissions that refer to the LINK ... The trick is to PROPOGATE to all FILES (not Folders and Files - that would ... Since Windows 2000 deny NTFS permission does not work ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to set folder private?
    ... If the check boxes under Permissions for user or group are shaded or if the ... then the file or folder has inherited ... permissions from the parent folder. ... are created in the folder inherit these permissions. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: folder permissions
    ... groups and something about deny over rides allow. ... groups assigned to this one folder and the same user has diff priv's ... permissions, everyone has full control. ...
    (microsoft.public.windows.server.general)
  • Re: Sharing
    ... > I apologize for the previous posting which applies for Windows XP Pro. ... > Permissions for Files and Folders ... > How Inheritance Affects File and Folder Permissions ... > are created in the folder inherit these permissions. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: folder permissions
    ... I will have this other folder I am trying to restrict permissions ... say) and "superceed" any NTFS permissions. ... groups and something about deny over rides allow. ... permissions, everyone has full control. ...
    (microsoft.public.windows.server.general)