Re: Unexpected security restriction for a user in both a user and administrative group.

Here's an example of a result I didn't expect: on the security
properties for a folder, inheritance is turned off and "Users" are
granted all permissions except full control (i.e. except "delete
subfolders", "change permissions", and "take ownership"). They are not
explicity denied any permission. Then by an oversight "Administrators"
are left off of the "permission entries" (i.e. the list of groups with
permissions granted or denied) for the folder. The result is that a
user in both the "Users" and "Administrators" groups is not allowed to
even list the contents of the folder.

When the security properties for the same folder are reversed
("Administrators" are granted full control and "Users" are not listed
in the "permission entries") the same user (a member of both the
"Users" and "Administrators" groups) has full control of the folder.

I would have expected this user to have the permissions of whichever
group was granted permissions to the folder.

I doubt I'll be able to understand all of this through examples. Is
there a document that lays out all of the rules?

--ScottS
.

Relevant Pages

  • Re: Too late for Administrators Password?
    ... if you're going to be messing with permissions then ALWAYS FIRST SET ... folder and click the Security Options folder. ... Next, administrator, you need to have the security tab show when you ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Still Read-only
    ... >That is how XP and W2k3 are. ... >read-only attribute of the folder. ... >and file permissions are different things. ... Security) ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP File and printer sharing SOLVED!! A HIDDEN FIREWALL!!
    ... Then click a shared folder to open it. ... problem is probably caused by share permissions or NTFS file system ... I decided that it /had/ to be a firewall problem. ... I hadn't used any Symantec security software ...
    (microsoft.public.windowsxp.network_web)
  • Re: Password Protect IExplore
    ... You can protect the files and folders you store on your computer to make ... To set, view, change, or remove special permissions for files and folders ... clear the Inherit from parent the permission entries that apply ... To configure security so that the subfolders and files will not ...
    (microsoft.public.internet.explorer.ieak)
  • Reinstalling WMP
    ... I don't know what the permissions were reset to. ... I tightened up the security on it and figured I'll ... reinstall by editing the .inf files that came with the WMP install package. ... Change the line to the new folder. ...
    (microsoft.public.security)