How to enforce "Explicit Allow" on a folder?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Ronnie (anonymous_at_discussions.microsoft.com)
Date: 03/23/04 

Date: Tue, 23 Mar 2004 05:01:59 -0800

I need to secure a few folders! I have created groups
that contain users. If for example I want to secure a
folder by preventing access to all users and allow access
to user A. The best way to do it is to Deny all users
and allow access to User A. But the Deny All takes
precidents over Allow, how do I make an Explicit Allow to
make the Allow option take precidents over Deny? any
Ideas!

Relevant Pages

  • Re: How to enforce "Explicit Allow" on a folder?
    ... > I need to secure a few folders! ... > to user A. The best way to do it is to Deny all users ... > make the Allow option take precidents over Deny? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Access Token with conflicting SIDs
    ... Is the reg entries you are working with configured in such a way that you can set up the Deny Everyone ACE at a higher level than the grant to admins? ... I've also read chapters 4 and 5 of Writing Secure Code to try to expand my knowledge/understanding. ... restores the original DACL. ... to have only the Administrators SID. ...
    (microsoft.public.platformsdk.security)
  • Re: Cannot Delete A Public Folder
    ... Permissions with a Deny. ... I don't see send as and Receive as as listed perms on my public folder ... >> Folders. ...
    (microsoft.public.exchange.admin)
  • Re: delete files w/zeros
    ... DoD 5220.22-M ... Anytime you see "DoD 5220.22-M compliant for standards of cleaning and ... children, but believe me it works great for securing files, folders, ... Are you telling me I can keep my secret stuff and just secure it? ...
    (microsoft.public.windowsxp.general)
  • Re: How do I do this without using Deny ACEs?
    ... Choose the groups/users under advanced you like to modify and choose edit, here you can see the "applyt on to" option. ... I want only admins to be able create folders at the ... AdminCreatedFolder*; just folders. ... I've figured out a way to do this with "Advanced" Deny ACEs, ...
    (microsoft.public.windows.server.security)