Re: Deny Permission

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Pegasus \(MVP\) (I.can_at_fly.com)
Date: 11/17/04


Date: Wed, 17 Nov 2004 23:02:23 +1100


"Keith" <@.> wrote in message
news:%23VyFIFJzEHA.1452@TK2MSFTNGP11.phx.gbl...
> I have some users who I do not want to be able to access specific folders
on
> my server.
>
> Currently I simply have not added their username to the list of
permissions.
>
> Is there any security advantage to adding them to the list for the
folder(s)
> and giving them deny all permission? Does this give a better level of
> protection?
>
> Thanks

With your current scheme, your users might gain access to
these folders if you granted access to a certain group and
if the users were members of this group.

If you deny them access explicitely then they won't get in,
even if they are members of an authorised group.



Relevant Pages

  • Re: NTFS Security Question.
    ... A subordinate object DOES not inherit the PARENT perms (in ... will assume "Nebulous" permissions that refer to the LINK ... The trick is to PROPOGATE to all FILES (not Folders and Files - that would ... Since Windows 2000 deny NTFS permission does not work ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Grant, Revoke, Deny
    ... Permissions are cumulative and DENY takes precedence. ... checked for sysadmin role members. ... GRANT SELECT ON YourTable TO Apps ...
    (microsoft.public.sqlserver.security)
  • Re: Cannot Delete A Public Folder
    ... Permissions with a Deny. ... I don't see send as and Receive as as listed perms on my public folder ... >> Folders. ...
    (microsoft.public.exchange.admin)
  • Re: Folder permissions - deny users, allow administrator
    ... members of Users are not to have the same permissions for "working" ... deny everything but read access to Users members in "completed". ... With those permissions there will be no explict permissions on ...
    (microsoft.public.security)
  • Re: Securing IIS IUSER
    ... so that these account are not effectively Users members, ... > I then explicitly granted it read permissions to the wwwroot, ... Before granting IUSER permission to read the files/folder, ... > are any of these permitting IUSER access to files and folders with "Users" ...
    (microsoft.public.windows.server.security)