Folder Permissions

User logged onto Win7Pro machine is having permissions problem with a folder. When she tries to place a file in the Z:\Service\Accounting\AR folder, it says "Access Denied". When I  check Properties>Security, that user has two permission entries:

One of them shows...
Type: Allow
Name: mary
Permission: Full Control
Inherited from: Z:\Service\Accounting\AR
Apply To: This folder, subfolder and files

The other one shows...
Type: Deny
Name: mary
Permission: Full Control
Inherited from: Z:\
Apply To: This folder, subfolder and files

I don't want her to have access to all folders in Z:\.  How should I give her permission to a subfolder without giving her permission to all folders and files in the Z drive?
wfcrrAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Shimshey RosenbergSysAdminCommented:
First, Deny permissions take the highest precedence.
You should remove all permissions for that user, and add allow permission on the directory they need access to.
By default no one has access, unless they are somehow allowed
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Shaun VermaakTechnical SpecialistCommented:
Remove the Deny

I don't want her to have access to all folders in Z:\.  How should I give her permission to a subfolder without giving her permission to all folders and files in the Z drive?
You did that already with your first entry unless she is part of a group that has permissions higher up
1
Keelyn HenningIT System AdministratorCommented:
Disable her inheritance for the folder than she will have access to only Z:\Service\Accounting\AR
1
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.