NTFS Permission denied vs not adding anything

What is the difference between adding a user to a directory & set permission to deny, & not adding the user at all?

In both cases, the user wont be able to access the folder, but why going all the way to deny?

Thanks
LVL 1
defreyAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Guillermo FeijóoSystems administratorCommented:
Hi:

If there are conflicting permissions, the most restrictive are applied.

If a user is member of a group that can read a folder,  but you set deny read permissión to that user, the user cant read that folder.
McKnifeCommented:
Another example: if you grant a group X change permissions but don't want User A to be able to change, you could deny change for that user without having to kick him out of that group. That is a use case.
But just denying him? No one would do that since not granting him anything is so much easier.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Seth SimmonsSr. Systems AdministratorCommented:
where i recently worked, i came across a share that had a group with explicit deny
found out the reason; a different group was given access though a few members shouldn't have it so another group with those individuals was created and explicitly denied.  that could be a scenario where you might need to do that, though a rare circumstance
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.