[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


how to set permissions for a single file

Posted on 2009-04-28
Medium Priority
Last Modified: 2013-12-04
Hello everyone,

Here's the environment:
Windows XP .
Pc is in a workgroup NOT a domain.

Folder structure:
Program Files\RaysFolder\Bin\Fix.exe
Rights are inherited from the Program Files folder.

My experience in such things:
VERY limited.

What I want to do:
Prevent members of the "Users" group from executing Fix.exe.  (See above)
But, I want to allow members of the Administrators group to execute it.

It seems that when I deny the Users group Read and Execute permissions, the Administrator is also affected.
That really confuses me.

Can I ask for some advice as to how I might allow Administrators to execute this file while denying Users the same privilege ?

Thanks in advance.

Accepted Solution

rettif9 earned 2000 total points
ID: 24256318
Permissions are controlled by the "rule of least privledge". Whatever group a user belongs to that has the least privledge controls that users acces. Since Users includes everyone then everyone has the 'deny' priveledge. Deny always overrides any other privledge. Try to create a new user group with a new name and put all users in it except administrators then set their permission to 'deny'. To create a new group - Control Panel << Administrative Tools << Computer Management << Local Users and Groups << Groups << [right click] add group. Also be sure to uncheck the inherited permissions box. Think about how you want to manage your users before you start. This can get to be a thorny problem if done badly.

Author Closing Comment

by:Accidental Hyper-V Administrator
ID: 31575721
Perfect.  EXACTLY what I needed.
It's one thing to be knowledgeable in an area (and you certainly are), but it a real bonus, when you find someone who also has the ability to explain what they know, in easy to understand terms.
Thanks a million.
Your the greatest.

Featured Post

New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
Please read the paragraph below before following the instructions in the video — there are important caveats in the paragraph that I did not mention in the video. If your PaperPort 12 or PaperPort 14 is failing to start, or crashing, or hanging, …
Suggested Courses

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question