Re: Specific folder permission only?

Hello 7777,

When you have shares for your users or branches etc. configured, you should create your own security groups to configure NTFS permissions on the folders that fit for your needs. Do not work with "Everyone" or "Authenticated users" group when not all domain members should have access. That way you can prevent easy one account from accessing other folders and only give it the needed permissions.

Also do not use the domain guest group or the guest account. Domain guests have the same permissions as the domain users. Only the guest account is further restricted and disabled by default.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Thanks Isaac for your speedy reply, I totally appreciate it. I guess
I'm aiming to have a specific user to access only 1 folder that's
within our domain and just wanted to make sure this user doesn't have
access to any other folders/directories on our domain. Networking
isn't my expertise so I wasn't sure what the default permissions and
folder rights that the Domain Users group has or the supposed
direction to go. Would the Domain Guests be another route to take or
what is the difference between those?...do both of these groups have
no rights/permissions by default which appears would be good as my
initial novice guesstimate?

"Isaac Oben [MCITP,MCSE]" <isaac.oben@xxxxxxxxxxxxxxxx> wrote in
message news:C07DD9F9-F562-4A58-8BB3-7FFB248F8111@xxxxxxxxxxxxxxxx

Hello 7777,

Yes you can grant to a specific folder by going to that folder
security settings and add user in question. You can remove user from
Default Domain Users group but you must assign user to a new group
and mark as the primary group because the Domain Users group by
default is set as the primary group..But I will not advice you to
remove user from the Domain Users group... What exactly are you
trying to achieve?

--
Isaac Oben [MCTIP:EA, MCSE]
"7777" <NoSpam@xxxxxxxxxx> wrote in message
news:OuF$Lpa2JHA.4632@xxxxxxxxxxxxxxxxxxxxxxx
Hello, when creating a new windows domain user in active directory
is there a way to grant this new user account access to one specific
folder only and/or remove them or re-assign them from the default
'Domain Users' group to another Primary Group?

Thanks in advance.



.

Relevant Pages

  • Re: local users and groups
    ... following error message occurs; "access to the \\servername has been ... group on the AD and the domain users group is in the users group of the ... If you look at the actual folder that is shared on server3, right click the folder name, choose properties, then choose Sharing tab. ... What groups/users do you see in there, and what are their share permissions? ...
    (microsoft.public.windows.server.active_directory)
  • Re: Folder Permissions.
    ... Use Domain users or authenticated users as the top level group and then create security groups for your needs, one with "read&execute" and another one with "modify", in AD for 1st only reading and second read/write/delete. ... With this basic setup on the folders you can define the basic settings without digging into deep with special permissions. ... I want Bob to be able to have full permission to his ... folder, then I want Mary to be able to access the folder, but not ...
    (microsoft.public.windows.server.active_directory)
  • Re: My documents permissions
    ... The domain users group is part of the domain admins group and ... folder, they get access denied or file is read only ... I have compared the permissions to other servers I have that but I ...
    (microsoft.public.security)
  • Re: Deny Delete on Folder Not Working?
    ... Using DENY permissions can be tricky. ... If, for example, your domain admins are also members of the domain, denying some right to domain users will affect the access of the domain admins as well. ... It does work so I suggest you experiment a bit on a test folder. ... Can anyone suggest why the Deny permission isn't working? ...
    (microsoft.public.windows.server.security)
  • Re: OWA distorted
    ... I have added the domain users, users, Authenticated Users in the securit ... on the bin folder if that will help in any way. ... if you hadn't changed the account used for Anonymous Access. ...
    (microsoft.public.exchange.admin)
Loading