Re: How to enforce "Explicit Allow" on a folder?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Derek Melber [MVP] (derekm_at_braincore.net)
Date: 03/23/04 

Date: Tue, 23 Mar 2004 08:41:11 -0700

Take everyone off of the ACL. Just add UserA. 

-- 
Derek Melber
BrainCore.Net
derekm@braincore.net
"Ronnie" <anonymous@discussions.microsoft.com> wrote in message
news:d50801c410d7$06bd5160$a001280a@phx.gbl...
> I need to secure a few folders!  I have created groups
> that contain users.  If for example I want to secure a
> folder by preventing access to all users and allow access
> to user A.  The best way to do it is to Deny all users
> and allow access to User A.  But the Deny All takes
> precidents over Allow, how do I make an Explicit Allow to
> make the Allow option take precidents over Deny? any
> Ideas!

Relevant Pages

  • How to enforce "Explicit Allow" on a folder?
    ... I need to secure a few folders! ... to user A. The best way to do it is to Deny all users ... make the Allow option take precidents over Deny? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Access Token with conflicting SIDs
    ... Is the reg entries you are working with configured in such a way that you can set up the Deny Everyone ACE at a higher level than the grant to admins? ... I've also read chapters 4 and 5 of Writing Secure Code to try to expand my knowledge/understanding. ... restores the original DACL. ... to have only the Administrators SID. ...
    (microsoft.public.platformsdk.security)
  • Re: Cannot Delete A Public Folder
    ... Permissions with a Deny. ... I don't see send as and Receive as as listed perms on my public folder ... >> Folders. ...
    (microsoft.public.exchange.admin)
  • Re: delete files w/zeros
    ... DoD 5220.22-M ... Anytime you see "DoD 5220.22-M compliant for standards of cleaning and ... children, but believe me it works great for securing files, folders, ... Are you telling me I can keep my secret stuff and just secure it? ...
    (microsoft.public.windowsxp.general)
  • Re: How do I do this without using Deny ACEs?
    ... Choose the groups/users under advanced you like to modify and choose edit, here you can see the "applyt on to" option. ... I want only admins to be able create folders at the ... AdminCreatedFolder*; just folders. ... I've figured out a way to do this with "Advanced" Deny ACEs, ...
    (microsoft.public.windows.server.security)