Re: Security tab, Users, Administrators

From: Colin Nash [MVP] (x_at_x)
Date: 06/30/04 

Date: Tue, 29 Jun 2004 19:36:18 -0400

"Deny" overrides everything else. You, like everyone else, are a member of
"Users" so you are denied.

If you don't want your normal Users to have access, just remove the Users
entry from the list (it might give you an error about permissions being
inherited from above... just follow the instructions and turn off
inheritance for that file/folder.) Just leave Administrators there (as well
as any SYSTEM stuff) and you will achieve what you want.

If a user/group is not listed in the Access Control List, then he or she
does not have access. It is rarely necessary to explicity issue a "Deny". 

-- 
Colin Nash
Microsoft MVP
Windows Printing/Imaging/Hardware
"Ed H" <w.whatkey@comcast.net> wrote in message 
news:OYofGniXEHA.1292@TK2MSFTNGP11.phx.gbl...
>I am trying to keep limited users on my computer from accessing certain
> programs. In safe mode, I right click the program exe file, select
> properties and then the security tab. I click the 'users' group and check
> 'deny.' This stops them from having access but it also stops me (computer
> administrator) from having access. I don't know how to fix this, I am
> clearly listed as belonging to the 'administrator's' group.
>
> Thank you,
> -- 
> Ed H
> Dell Dimension 4550, WinXP Home SP1
> 60 Gig. HD, 512 DDR, Pentium IV 2.40 GHz.
>
>
>

Relevant Pages

  • Re: Security tab, Users, Administrators
    ... Just leave Administrators there (as ... It is rarely necessary to explicity issue a "Deny". ... In safe mode, I right click the program exe file, select ... This stops them from having access but it also stops me ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MMC - admin locked out too
    ... just use the Deny trick to exempt ... from an admin account before it can edit policy, ... > Limit access to Regedit, MMC, command line, etc. & ... > restrict such items to Administrators only. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: I need a permission GURU!
    ... Administrators and Users are two separate groups and "deny" to users ... > permissions on a file or folder in either OS to lock out members of ... > Its as if all accounts fall under the "users" group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MMC - admin locked out too
    ... I probably should have added that the Deny is used here ... granted to Administrators would also do this, ... and granted permissions for all of those other accounts. ... > the Deny column for the Full Control line. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MMC - admin locked out too
    ... I would appreciate a clarification about using the "Deny of Full ... Control for the Administrators." ... Full Control for the Administrators, I right clicked on the windows/system32 ... When I closed MMC, now, even I can't get to ...
    (microsoft.public.windowsxp.security_admin)