Re: Denials effect all groups and users instead of the one their assigned to.

From: Tom (Tom_at_Link.Com)
Date: 07/30/03 

Date: Wed, 30 Jul 2003 12:17:47 -0700

     You mean that even though I don't have users as my
group, I am still a member of Users by default?

     Thank you,

          Tom

>-----Original Message-----
>In this case you don't have to put denial permission. (I
wouldn't do it --
>specially not on Users group since everyone created on
the PC will be part
>of that group by default...). Try to stay away from deny.
>
>Remember this rule!!!
>***
>On WinodwsXP most restrictive group will prevail. So if
you have full access
>on a resource as a member of Administrator group and
deny access as a member
>of Users group you will be denied access to this
resource.
>****
>
>Best practice is (would be):
>- remove everyone from the folder permission
>- give users that need to access this folder appropriate
permission (Read,
>Write, ...)
>(- give administrator full control in case there is no
one else with full
>control)
>
>This (if setup properly) will deny user "Carrie" access
to the folder...
>
>--
>Mike
>MCSA 2K, MCSE 2K, MCT, ...
>
>"Tom" <Tom@Link.Com> wrote in message
>news:00aa01c356c7$b0934cf0$a601280a@phx.gbl...
>> It is on a NTFS disk on the same machine with an
XP
>> Pro operating system.
>>
>> I am trying to setup a folder that Users are
denied
>> access to, bot that I can have access to as a Power
User
>> or an Administrator. This is a test for a more
elaborate
>> setup.
>>
>> Thank you,
>>
>> Tom
>>
>>
>> >------------------------------------------------------
-
>> I'm I reported that the deny was put on user
Carrie,
>> however, it was actually place on group Users.
>> Everything else is correct.
>>
>> Thank You,
>>
>> Tom
>>
>>
>> >-----Original Message-----
>> >On what resource? Is this folder restriction or some
>> operating system
>> >restriction that you would like to setup...
>> >
>> >--
>> >Mike
>> >MCSA 2K, MCSE 2K, MCT, ...
>> >
>> >"Tom" <Tom@Link.Com> wrote in message
>> >news:4f3501c356c2$6c9f28c0$a001280a@phx.gbl...
>> >> I am administrator (user name Tom) a member of
>> >> Administrators, and Power Users. When I put a deny
on
>> >> user name Carrie, a member of Users only, the deny
>> >> affects me, too, no matter which deny I do it still
>> >> effects me.
>> >>
>> >> Thank You,
>> >>
>> >> Tom
>> >>
>> >>
>> >> >-----Original Message-----
>> >> >Tom,
>> >> >
>> >> >can you give us more information. What user, what
>> group,
>> >> what are you trying
>> >> >to deny...
>> >> >
>> >> >On WinodwsXP most restrictive group will prevail.
So
>> if
>> >> you have full access
>> >> >on a resource as a member of Administrator group
and
>> >> deny access as a member
>> >> >of Users group you will be denied access to this
>> >> resource.
>> >> >
>> >> >--
>> >> >Mike
>> >> >MCSA 2K, MCSE 2K, MCT, ...
>> >> >
>> >> >"Tom" <Tom@Link.Com> wrote in message
>> >> >news:0e5401c356b7$eb01e640$a501280a@phx.gbl...
>> >> >> Denials effect all groups and users instead
of
>> the
>> >> >> one their assigned to. Is there any switch that
>> >> controls
>> >> >> this?
>> >> >>
>> >> >> Thanks in advance,
>> >> >>
>> >> >> Tom
>> >> >
>> >> >
>> >> >.
>> >> >
>> >
>> >
>> >.
>> >
>
>
>.
>

Relevant Pages

  • Re: Common place to write application data
    ... If you want it to access a shared network folder, ... CSIDL_COMMON_APPDATA is a location where a user has no permission. ... There is no installation. ... XP and Vista with user running without administrator ...
    (microsoft.public.win32.programmer.kernel)
  • Re: folder with no permission?!
    ... change the permission as administrator but can do it as the work account ... when granting the work account with administrative privilege. ... You have indicated "I cannot change anything inside this folder and I ...
    (microsoft.public.windowsxp.security_admin)
  • RE: XP Access Denied Error (Im Administrator)
    ... Please check if you have enough permission on that folder. ... HOW TO: Take Ownership of a File or Folder in Windows XP WGID:458 ... Try safe mode: ... Windows XP the Administrator account is not displayed in User Accounts ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Is there anyway I can stop users moving folders to other folders?
    ... Access Control Settings for DATA ... Permission Entry for DATA ... >move a folder just with that group membership. ... >> The person whose access I'm trying to restrict is a member of group ...
    (microsoft.public.win2000.security)
  • Re: administrator problem-denied access for saving on a cd
    ... file ownership and permissions supersede administrator rights. ... Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ... on when you were refused permission to access the files. ...
    (microsoft.public.windowsxp.security_admin)