Solved

User rights - Bypass traverse checking on Windows 2012R2

Posted on 2014-10-09
3
396 Views
Last Modified: 2014-10-14
Hi,

We are using Windows Server 2012R2 for a file server.
We have installed the essentials windows server Dashboard on this.

On the local drive, we have shared some folders like "Data, administration, operation, finance,.."
On the "operation" folder, we have a subfolder... for exemple "abroad_operation".

For one of our users, we need to give permission to access "abroad_operation" but not to "operation".
For this moment, we are setting on "Operation" read access and then on "abroad_acces" read/write access.

If I set no access on "operation" and give full control on "Abroad_access", the user has no access to the folder...

Needs some help.

Thanks a lot in advance.
0
Comment
Question by:Dextro666
3 Comments
 
LVL 79

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 250 total points
ID: 40372404
you have to change your folder hierarchy from most restrictive -> least restrictive to least-restrictive -> most restrictive.

Thar or create a NEW Share that points to that exact location.
0
 
LVL 42

Accepted Solution

by:
kevinhsieh earned 250 total points
ID: 40374871
Instead of giving read permissions to the parent directories, I go to advanced permissions and give list permissions to the parent directory and apply to this folder only. I do this from the top of the share down to the immediate parent of the directory they need read and/or write access to. It prevents them from being able to open files in the parent directories.
0
 

Author Comment

by:Dextro666
ID: 40380066
Thanks for the help.
0

Featured Post

Migrating Your Company's PCs

To keep pace with competitors, businesses must keep employees productive, and that means providing them with the latest technology. This document provides the tips and tricks you need to help you migrate an outdated PC fleet to new desktops, laptops, and tablets.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Have you ever had a hard drive that you can't boot into, but need to change the registry? Here is the solution! This article guides you through accessing and editing a registry of a non-primary drive. To read registry information on a non-prim…
Know what services you can and cannot, should and should not combine on your server.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

778 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question