Solved

User rights - Bypass traverse checking on Windows 2012R2

Posted on 2014-10-09
3
406 Views
Last Modified: 2014-10-14
Hi,

We are using Windows Server 2012R2 for a file server.
We have installed the essentials windows server Dashboard on this.

On the local drive, we have shared some folders like "Data, administration, operation, finance,.."
On the "operation" folder, we have a subfolder... for exemple "abroad_operation".

For one of our users, we need to give permission to access "abroad_operation" but not to "operation".
For this moment, we are setting on "Operation" read access and then on "abroad_acces" read/write access.

If I set no access on "operation" and give full control on "Abroad_access", the user has no access to the folder...

Needs some help.

Thanks a lot in advance.
0
Comment
Question by:Dextro666
3 Comments
 
LVL 80

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 250 total points
ID: 40372404
you have to change your folder hierarchy from most restrictive -> least restrictive to least-restrictive -> most restrictive.

Thar or create a NEW Share that points to that exact location.
0
 
LVL 42

Accepted Solution

by:
kevinhsieh earned 250 total points
ID: 40374871
Instead of giving read permissions to the parent directories, I go to advanced permissions and give list permissions to the parent directory and apply to this folder only. I do this from the top of the share down to the immediate parent of the directory they need read and/or write access to. It prevents them from being able to open files in the parent directories.
0
 

Author Comment

by:Dextro666
ID: 40380066
Thanks for the help.
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Looking for easy way to upgrade Windows 2003 Server to 2012 2 89
GPO shows twice under GPresults 3 79
Remote access server vs NAP 4 88
SolarWind and DNS Server 12 87
Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
The password reset disk is often mentioned as the best solution to deal with the lost Windows password problem. In Windows 2008, 7, Vista and XP, a password reset disk can be easily created. But besides Windows 7/Vista/XP, Windows Server 2008 and ot…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question