Re: Security tab, Users, Administrators

From: Ed H (w.whatkey_at_comcast.net)
Date: 06/30/04 

Date: Tue, 29 Jun 2004 19:56:09 -0400

Thanks Colin, that did it perfect. 

-- 
Ed H
Dell Dimension 4550, WinXP Home SP1
60 Gig. HD, 512 DDR, Pentium IV 2.40 GHz.
"Colin Nash [MVP]" <cnash x@x mvps.org> wrote in message
news:upsohHjXEHA.1652@TK2MSFTNGP09.phx.gbl...
> "Deny" overrides everything else.  You, like everyone else, are a member
of
> "Users" so you are denied.
>
> If you don't want your normal Users to have access, just remove the Users
> entry from the list (it might give you an error about permissions being
> inherited from above... just follow the instructions and turn off
> inheritance for that file/folder.)  Just leave Administrators there (as
well
> as any SYSTEM stuff) and you will achieve what you want.
>
> If a user/group is not listed in the Access Control List, then he or she
> does not have access.  It is rarely necessary to explicity issue a "Deny".
>
>
> -- 
> Colin Nash
> Microsoft MVP
> Windows Printing/Imaging/Hardware
>
>
>
> "Ed H" <w.whatkey@comcast.net> wrote in message
> news:OYofGniXEHA.1292@TK2MSFTNGP11.phx.gbl...
> >I am trying to keep limited users on my computer from accessing certain
> > programs. In safe mode, I right click the program exe file, select
> > properties and then the security tab. I click the 'users' group and
check
> > 'deny.' This stops them from having access but it also stops me
(computer
> > administrator) from having access. I don't know how to fix this, I am
> > clearly listed as belonging to the 'administrator's' group.
> >
> > Thank you,
> > -- 
> > Ed H
> > Dell Dimension 4550, WinXP Home SP1
> > 60 Gig. HD, 512 DDR, Pentium IV 2.40 GHz.
> >
> >
> >
>
>

Relevant Pages

  • Re: Security tab, Users, Administrators
    ... Just leave Administrators there (as well ... It is rarely necessary to explicity issue a "Deny". ... In safe mode, I right click the program exe file, select> properties and then the security tab. ... This stops them from having access but it also stops me from having access. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MMC - admin locked out too
    ... just use the Deny trick to exempt ... from an admin account before it can edit policy, ... > Limit access to Regedit, MMC, command line, etc. & ... > restrict such items to Administrators only. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: I need a permission GURU!
    ... Administrators and Users are two separate groups and "deny" to users ... > permissions on a file or folder in either OS to lock out members of ... > Its as if all accounts fall under the "users" group. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MMC - admin locked out too
    ... I probably should have added that the Deny is used here ... granted to Administrators would also do this, ... and granted permissions for all of those other accounts. ... > the Deny column for the Full Control line. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MMC - admin locked out too
    ... I would appreciate a clarification about using the "Deny of Full ... Control for the Administrators." ... Full Control for the Administrators, I right clicked on the windows/system32 ... When I closed MMC, now, even I can't get to ...
    (microsoft.public.windowsxp.security_admin)