Re: Denials effect all groups and users instead of the one their assigned to.

From: Miha Pihler (miha.pihler_at_Atlantis-N0Spam.si)
Date: 07/30/03 

Date: Wed, 30 Jul 2003 21:34:49 +0200

You are not a member of Users group only if you have removed yourself from
the group. By default any new user created on the system will first be
member of User group. Then you can add him to another groups and e.g. remove
him from Users group...

Open your account properties and check Member of tab. If shows Users group
then you are still a member. If you are still a member then setting deny on
a folder will also effect you even if you are also in Administrator and
Power user group... 

-- 
Mike
MCSA 2K, MCSE 2K, MCT, ...
"Tom" <Tom@Link.Com> wrote in message
news:50a801c356cf$428c8430$a001280a@phx.gbl...
>      You mean that even though I don't have users as my
> group, I am still a member of Users by default?
>
>      Thank you,
>
>           Tom
>
>
> >-----Original Message-----
> >In this case you don't have to put denial permission. (I
> wouldn't do it -- 
> >specially not on Users group since everyone created on
> the PC will be part
> >of that group by default...). Try to stay away from deny.
> >
> >Remember this rule!!!
> >***
> >On WinodwsXP most restrictive group will prevail. So if
> you have full access
> >on a resource as a member of Administrator group and
> deny access as a member
> >of Users group you will be denied access to this
> resource.
> >****
> >
> >Best practice is (would be):
> >- remove everyone from the folder permission
> >- give users that need to access this folder appropriate
> permission (Read,
> >Write, ...)
> >(- give administrator full control in case there is no
> one else with full
> >control)
> >
> >This (if setup properly) will deny user "Carrie" access
> to the folder...
> >
> >-- 
> >Mike
> >MCSA 2K, MCSE 2K, MCT, ...
> >
> >"Tom" <Tom@Link.Com> wrote in message
> >news:00aa01c356c7$b0934cf0$a601280a@phx.gbl...
> >>      It is on a NTFS disk on the same machine with an
> XP
> >> Pro operating system.
> >>
> >>      I am trying to setup a folder that Users are
> denied
> >> access to, bot that I can have access to as a Power
> User
> >> or an Administrator.  This is a test for a more
> elaborate
> >> setup.
> >>
> >>      Thank you,
> >>
> >>           Tom
> >>
> >>
> >> >------------------------------------------------------
> -
> >>      I'm I reported that the deny was put on user
> Carrie,
> >> however, it was actually place on group Users.
> >> Everything else is correct.
> >>
> >>      Thank You,
> >>
> >>          Tom
> >>
> >>
> >> >-----Original Message-----
> >> >On what resource? Is this folder restriction or some
> >> operating system
> >> >restriction that you would like to setup...
> >> >
> >> >-- 
> >> >Mike
> >> >MCSA 2K, MCSE 2K, MCT, ...
> >> >
> >> >"Tom" <Tom@Link.Com> wrote in message
> >> >news:4f3501c356c2$6c9f28c0$a001280a@phx.gbl...
> >> >>      I am administrator (user name Tom) a member of
> >> >> Administrators, and Power Users.  When I put a deny
> on
> >> >> user name Carrie, a member of Users only, the deny
> >> >> affects me, too, no matter which deny I do it still
> >> >> effects me.
> >> >>
> >> >>      Thank You,
> >> >>
> >> >>           Tom
> >> >>
> >> >>
> >> >> >-----Original Message-----
> >> >> >Tom,
> >> >> >
> >> >> >can you give us more information. What user, what
> >> group,
> >> >> what are you trying
> >> >> >to deny...
> >> >> >
> >> >> >On WinodwsXP most restrictive group will prevail.
> So
> >> if
> >> >> you have full access
> >> >> >on a resource as a member of Administrator group
> and
> >> >> deny access as a member
> >> >> >of Users group you will be denied access to this
> >> >> resource.
> >> >> >
> >> >> >-- 
> >> >> >Mike
> >> >> >MCSA 2K, MCSE 2K, MCT, ...
> >> >> >
> >> >> >"Tom" <Tom@Link.Com> wrote in message
> >> >> >news:0e5401c356b7$eb01e640$a501280a@phx.gbl...
> >> >> >>      Denials effect all groups and users instead
> of
> >> the
> >> >> >> one their assigned to.  Is there any switch that
> >> >> controls
> >> >> >> this?
> >> >> >>
> >> >> >>      Thanks in advance,
> >> >> >>
> >> >> >>           Tom
> >> >> >
> >> >> >
> >> >> >.
> >> >> >
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >

Relevant Pages