Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users
Course Of The Month
6 days, 21 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
How to restrict access to folders below a folder shared with "Everyone"?
Posted on 2016-08-26
Hi,
We have a folder called "Shared" on our SBS server which is shared at the top level with "Everyone".
We've been asked to create some remote users on the system and to only grant them access to a couple of folders within the Shared folder. I may be missing the obvious and over complicating things but I can't think of an easy way to just grant access to certain folders below that shared folder without removing the "everyone" permission from the top level which I'm reluctant to do as it will open a can of worms.
Any advice gladly received!
Thanks
Adam
We have a folder called "Shared" on our SBS server which is shared at the top level with "Everyone".
We've been asked to create some remote users on the system and to only grant them access to a couple of folders within the Shared folder. I may be missing the obvious and over complicating things but I can't think of an easy way to just grant access to certain folders below that shared folder without removing the "everyone" permission from the top level which I'm reluctant to do as it will open a can of worms.
Any advice gladly received!
Thanks
Adam
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
3
-
3
7 Comments
Right-click the shared file/ folder>Security>click the advanced tab>click change permissions>uncheck
Include inheritable permissions from this object's parent>click ADD
You can now highlight and remove EVERYONE from this folder and add who you need to access it.
Include inheritable permissions from this object's parent>click ADD
You can now highlight and remove EVERYONE from this folder and add who you need to access it.
Active today
Hi Foxluv,
Thanks for that, problem is that they have 55 users and I'll have to add them all in manually if I don't use the everyone group. The top level folder has say 50 subfolders and I want everyone except 1 person to have access to all 50 folders, the 1 person will only have access to 1 folder of the 50 but everyone else will also need access to that 1 folder. If I remove Everyone from the top level surely I'll have to manually put each user except that one I want to restrict back in won't I?
Thanks
Thanks for that, problem is that they have 55 users and I'll have to add them all in manually if I don't use the everyone group. The top level folder has say 50 subfolders and I want everyone except 1 person to have access to all 50 folders, the 1 person will only have access to 1 folder of the 50 but everyone else will also need access to that 1 folder. If I remove Everyone from the top level surely I'll have to manually put each user except that one I want to restrict back in won't I?
Thanks
Active today
Hi,
Surely that will deny access to the 1 folder I want that user to have access to. I effectively want to deny access for 1 user to all except 1 folder under the Shared folder. If I remove inherited permissions on that 1 folder and add the user I want to give access to then everyone else will not be able to see the folder but they need to see it too. You can see why I was confused enough to ask the question! :-)
Surely that will deny access to the 1 folder I want that user to have access to. I effectively want to deny access for 1 user to all except 1 folder under the Shared folder. If I remove inherited permissions on that 1 folder and add the user I want to give access to then everyone else will not be able to see the folder but they need to see it too. You can see why I was confused enough to ask the question! :-)
Go to the last comment in this link. Remove his rights to the folder and sub folders, then if anything add him manually to the one folder you want him to have access to.
https://social.technet.microsoft.com/Forums/windowsserver/en-US/a7c4a7a7-6c53-4ec6-b92d-035dbff13d8e/powershell-scrip-to-remove-security-permission-from-filesfolders?forum=winserverpowershell
https://social.technet.microsoft.com/Forums/windowsserver/en-US/a7c4a7a7-6c53-4ec6-b92d-035dbff13d8e/powershell-scrip-to-remove-security-permission-from-filesfolders?forum=winserverpowershell
Active today
create a 2 new security groups: name one 'restricted users', name the other 'unrestricted users'
add the new user into restricted users group and the remainder into the unrestricted users group
share permissions can still be everyone with read/write
d:\topfolder shared as 'shared' ntfs permissions 'unrestricted users' (read/write/modify/delete/
create a new share d:\topfolder\restricted as 'restricted' give permissions to 'unrestricted users' and 'restricted users'
add the new user into restricted users group and the remainder into the unrestricted users group
share permissions can still be everyone with read/write
d:\topfolder shared as 'shared' ntfs permissions 'unrestricted users' (read/write/modify/delete/
create a new share d:\topfolder\restricted as 'restricted' give permissions to 'unrestricted users' and 'restricted users'
Featured Post
Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory.
If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses
Course of the Month6 days, 21 hours left to enroll
726 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.