Solved

NTFS access to only one file

Posted on 2014-09-04
2
263 Views
Last Modified: 2014-09-10
using Windows Server 2003 Standard as a file server.  we have a consultant coming in and they need access to only one file on our file server.  'Allow inheritable permissions' is on.  Is there a way to give this user 'modify' permissions on only one file (ie. 'document1.doc') and nothing else?

\\server1\shared\folder1

document1.doc
document2.doc
document3.doc
0
Comment
Question by:jkimzlg
2 Comments
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 250 total points
ID: 40304419
Create a separate login for that user that is NOT a member of any of the groups that are included in the inherited permissions.  Then give that user account Traverse Folder/Execute File permissions to the upper level folders and Modify permissions to only that one document. Also be sure that if there are any share permissions involved that those are set to Read for this user account.
0
 
LVL 22

Assisted Solution

by:yo_bee
yo_bee earned 250 total points
ID: 40306988
I not sure you want to use Traverse/Execute setting because this will allow users to open files within the parent folder and if allowed to propagate to subdirectory then the user will be allow to open the files in the subs.

I would use List Content/read data instead then give the rights you want to the files or you can just give rights to a user account as describe by HyperCat to just the three files.  Then give them the complete UNC path to the three files.

So do not give any rights to consultant1 accept at the file level.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
In-place Upgrading Dirsync to Azure AD Connect
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question