Solved

NTFS access to only one file

Posted on 2014-09-04
2
273 Views
Last Modified: 2014-09-10
using Windows Server 2003 Standard as a file server.  we have a consultant coming in and they need access to only one file on our file server.  'Allow inheritable permissions' is on.  Is there a way to give this user 'modify' permissions on only one file (ie. 'document1.doc') and nothing else?

\\server1\shared\folder1

document1.doc
document2.doc
document3.doc
0
Comment
Question by:jkimzlg
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 250 total points
ID: 40304419
Create a separate login for that user that is NOT a member of any of the groups that are included in the inherited permissions.  Then give that user account Traverse Folder/Execute File permissions to the upper level folders and Modify permissions to only that one document. Also be sure that if there are any share permissions involved that those are set to Read for this user account.
0
 
LVL 23

Assisted Solution

by:yo_bee
yo_bee earned 250 total points
ID: 40306988
I not sure you want to use Traverse/Execute setting because this will allow users to open files within the parent folder and if allowed to propagate to subdirectory then the user will be allow to open the files in the subs.

I would use List Content/read data instead then give the rights you want to the files or you can just give rights to a user account as describe by HyperCat to just the three files.  Then give them the complete UNC path to the three files.

So do not give any rights to consultant1 accept at the file level.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
A hard and fast method for reducing Active Directory Administrators members.
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
Suggested Courses

624 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question