Solved

folder access windows 2003 server

Posted on 2011-02-10
6
226 Views
Last Modified: 2012-05-11
i want to let Uchino to access full control on this folder.
but he is in MIBS group
how do i make exception?
Snap7.png
Snap8.png
0
Comment
Question by:Hiroyuki Tamura
6 Comments
 
LVL 27

Assisted Solution

by:Lukasz Chmielewski
Lukasz Chmielewski earned 31 total points
ID: 34865663
Add UCHINO to another group and set the group access to full.
Try that.
0
 

Author Comment

by:Hiroyuki Tamura
ID: 34865851
thank you.
are there any functions "exception"?
0
 
LVL 59

Assisted Solution

by:Darius Ghassem
Darius Ghassem earned 31 total points
ID: 34865986
If he is part of that group he will get those permissions. Permissions are cumulative which means if user has restricted access from one permission then this permission will be global even if you gave him more permission in another group
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 9

Accepted Solution

by:
Aeriden earned 32 total points
ID: 34866365
The only exception to additive permissions is if DENY is used - that takes precedence over granted permissions.
0
 
LVL 5

Assisted Solution

by:9660kel
9660kel earned 31 total points
ID: 34874434
Create a new group for the required permissions, add the user to that group, and remove them from the group with access denied.

Another method is to grant permissions to the folder directly, but that is very messy in short order.
0
 
LVL 5

Expert Comment

by:9660kel
ID: 34874869
Just for clarity, explicit permissions override inherited permissions. On a local system, that includes deny permissions.

Any network transactions are subject to the most stringent applicable permissions. This means on a share or other network resource, a deny permission always overrides an allow permission.

Use of the deny permission should be very limited, and only where it is actually needed. Most of the time, removing the allow permissions is easier, and just as effective.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

So you have two Windows Servers and you have a directory/folder/files on one that you'd like to mirror to the other?  You don't really want to deal with DFS or a 3rd party solution like Doubletake. You can use Robocopy from the Windows Server 200…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now