Solved

Permissions in Server 2008

Posted on 2014-12-11
11
60 Views
Last Modified: 2015-01-13
Hello Experts!

I created a folder that need to be tightened down to one Full Control user.  Other users can read and execute.

However when I got that that folder form another user, that user can still make changes to the file.  Sharing is apparently different in '08 than it was in '03.

What all do I need to do to prevent changes to this file except by that one user?

Thanks

thedslguy
0
Comment
Question by:thedslguy
  • 6
  • 5
11 Comments
 
LVL 23

Expert Comment

by:NVIT
ID: 40494634
Assuming the UserToLockOut previously had the right to make changes before you locked it down, UserToLockOut must logout then logon to see new rights.
0
 
LVL 1

Author Comment

by:thedslguy
ID: 40494672
NewVillageIT

UserToLockOut is a term with which I am not familiar.

Tell me more about it, please.

Thanks

tdg
0
 
LVL 23

Expert Comment

by:NVIT
ID: 40494678
Sorry, I just meant in general - the user you want to lock out or restrict from that folder or file. It is not a switch or setting.
0
 
LVL 1

Author Comment

by:thedslguy
ID: 40494724
NewVillageT

OK, I get it.

Look at the screenshot I sent.  you will notice that Users is the user I have selected and it is both Full Control and greyed out so I cannot change it.

I believe this is the reason that any user can make changes to the file.
0
 
LVL 23

Expert Comment

by:NVIT
ID: 40494755
I don't see an attachment.

when I got that that folder form another user
Please clarify.

What have you done so far to try to restrict access?
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 1

Author Comment

by:thedslguy
ID: 40499599
NewVillageT

That should have read "When I go to that folder from another user....."

I have given one user Full Control and the other users I gave Read & Execute

I'll get another screenshot and attach it
screenshot.jpg
0
 
LVL 23

Accepted Solution

by:
NVIT earned 500 total points
ID: 40499679
EDIT #2:

Logon admin.

Make a test folder and copy some files to it.

Right- click the folder. Properties. In the Security tab , pick Advanced. Pick Change Permissions. Uncheck Include Inheritable Permissions from parent. In the pop up dialog, pick Add.

Pick OK until you're back to the Security tab. Pick Edit.

Here, Add and Remove users and groups.

Make sure the restricted user and his groups just has Read & Execute rights.

But, make sure your Full Control user, administrator or domain admin is included with Full Control rights.

Pick OK when done.

Logon the restricted user. Can he see the folder contents? He may be able to see the folder but not the contents.
0
 
LVL 1

Author Comment

by:thedslguy
ID: 40507600
NewVillageIT

I'll try this over the weekend.

Thanks

tdg
0
 
LVL 1

Author Comment

by:thedslguy
ID: 40547580
I tried this and the result was a loss of information such that the user had to rebuild the file.
She was pretty upset and so was her boss.

They have decided to leave it as is.

There is definitely something wrong with the file, but I'm not willing to risk any further damage.

I will split the points

tdg
0
 
LVL 1

Author Comment

by:thedslguy
ID: 40547584
Oops

No need to split them.
0
 
LVL 23

Expert Comment

by:NVIT
ID: 40548020
@thedslguy,

I'm confused. You awarded points but it doesn't sound like it worked due to "...loss of information"

Still, the steps I showed would not damage the file contents. At the most, it would hide the file itself from certain users except the Full Control user, domain admin, or administrator. The file would still be there, accessible to these excepted users. In addition, I mentioned to do a test folder.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now