Windows 2008 Permissions and Inheritance

Posted on 2012-08-15
Last Modified: 2012-08-20
I have a folder structure and explicit permissions at the top level on a Windows 2008 server.  A user is part of a group that has permissions and was also listed individually which seems to have restricted him and I understand that yet when I remove his individual permission by breaking the inheritance at the top level and force the permissions to propogate down he still remains in certian folders that are inheriting.

Question by:iNetSystem
    LVL 9

    Accepted Solution

    There are 2 levels of permissions.  I assume he is accessing this folder via a share?  If so then you will need to check the share permissions as well.  A common way this is done is to give full share rights to everyone and then lock the permissions down with ntfs permissions.  Do the folders that he still has access to have inheritance enabled?  Are these folders shared?

    Author Comment

    Accessing via DFS and EVERYONE does have Full access at the share level
    LVL 9

    Expert Comment

    Is he in any groups that the folders that are inheriting permissions are getting?

    Featured Post

    The problems with reply email signatures

    Do you wish that you could place an email signature under a reply? Well, unfortunately, you can't. That great Exchange/Office 365 signature you've created will just appear at the bottom of an email chain. What a pain! Is there really no way to solve this? Well, there might be...

    Join & Write a Comment

    Are you having trouble running ADPREP on your current 32-bit Domain Controller? Have you ran ADPREP multiple times on your Domain but still get an error stating you have not prepared your Domain yet? Here is a change that gets even the most seaso…
    I was asked if I could set up a fax machine so that incoming faxes were delivered to people's Exchange inboxes and so that they could send faxes from their desktops without needing to print the document first.  I knew it was possible but I had no id…
    This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
    This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now