• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 289
  • Last Modified:

File Server folder permissions

I have several users that use a folder thats on the company shared directory, only they can access it and only they should have access.  We have a team of admins and they can naturally see the contents of this folder ( in AD environment).  How do i cutoff the admins (that includes me ) from access that folder ?  I want to be sure that if i remove administrators from the list that the users who need access will still have it and those that don't well will  not have access.  If something goes wrong i know we can always take possession but we don't need access to that folder.
3 Solutions
I dont think you can deny an administrator,
How to set, view, change, or remove file and folder permissions in Windows XP
How to create and delete hidden or administrative shares on client computers
Jason WatkinsIT Project LeaderCommented:

You should be able to remove the admins by breaking the inheritance from the root of the directory.

Go to the folder's properties and choose the security tab.
Click the "advanced" button at the bottom of the window
From the resultant window, click the radio button that reads "Allow inheritable permissions etc....."
A choice dialog box will be presented asking you to copy, remove or cancel.
Choose copy
Close all of the property sheets, now should be able to remove the admins from the ACL

The administrators group will always have the "take ownership permission" on a directory, even if they are not listed on the ACL.

While you can remove administrators from the permission list, be careful that you can still backup the folder.
Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

John Gates, CISSPSecurity ProfessionalCommented:
You will need to make sure your backup account has read access to the folder in question.  
vannyxAuthor Commented:
backup will have access still.
Jason WatkinsIT Project LeaderCommented:
Thanks for the points...
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now