Can't Deny Delete on a table.

Tech-Archive recommends: Fix windows errors by optimizing your registry

anonymous_at_discussions.microsoft.com
Date: 04/27/04


Date: Tue, 27 Apr 2004 08:25:42 -0700

Are you users member of server role like sa
(administrator)? Because normally if you deny at one place
that deny takes priority over the allow.
What you have done should work.
>-----Original Message-----
>Hi,
>
>I'm trying to deny the delete permission on a table to
users. I've
>tried several ways of doing this but none of them seem to
be working.
>
>I've tried denying the permission to the public role both
through
>Enterprise Manager and using a Transact-SQL statement.
I've also tried
>denying the permission to individual users and that
doesn't seem to
>work either.
>
>Am I missing something here? Thanks in advance.
>.
>



Relevant Pages

  • Cant Deny Delete on a table.
    ... I'm trying to deny the delete permission on a table to users. ... I've tried denying the permission to the public role both through ... Am I missing something here? ...
    (microsoft.public.sqlserver.programming)
  • Re: Unable to prevent OU deletion by Domain Admins?
    ... > that DENY ACLs trump any allow ACLs ... Deny permissions take precedence over allow ... the list of permission entries in the DACL. ... I understand that domain admins have the delete and delete subtree rights at the domain level. ...
    (microsoft.public.win2000.active_directory)
  • Re: Unable to prevent OU deletion by Domain Admins?
    ... >> that DENY ACLs trump any allow ACLs ... Deny permissions take precedence over allow ... > the list of permission entries in the DACL. ... > You could modify the default domain admins permissions so that they no ...
    (microsoft.public.win2000.active_directory)
  • Re: Unable to prevent OU deletion by Domain Admins?
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... >>>> It is even worse when Microsoft's own guidelines for parsing ACLs ... >>>> that DENY ACLs trump any allow ACLs ... >>> the list of permission entries in the DACL. ...
    (microsoft.public.win2000.active_directory)
  • Re: Joining Computers to Domain
    ... >>immediately indicate if you have a DENY somewhere. ... >>> is some permission that is blocking it. ... >>> Our problem is with student admins. ... >>> add computers to the domain. ...
    (microsoft.public.windows.group_policy)