Re: manipulating non-inherited permissions on folders


<Voldomort> wrote in message
news:ZYOdnfJgA8aCNE_YnZ2dnUVZ_segnZ2d@xxxxxxxxxxxxxxxxxx

I'm trying to set up some limited access folders without having to make
special groups (containers) nor go through the hassle of using "deny" to
remove access to others. I've noticed that when I create a directory which
I establish not to inherit permissions for itself and its children. Then I
give modify privileges to some normal user, and full control to
"administrator" the administrator is actually denied access to any of the
child folders. It's weird. The interface really does stay
the administrator account has full control, but in fact it is denied
access to read, traverse, or any other functions. Does anyone know why
this is so, and if there's a workaround?

Technically all permissions are set in "one place" AN OBJECT.

Inheritable permissions, or propagating them when you make changes
at the parent makes it appear usually that the parent and child permissions
are technically the "same" -- but they are really being set on each object
in some real sense.

Directories (don't use the word "folder" if you really want to UNDERSTAND
permissions) have multiple settings for Permissions also: The directory
itself
has permissions, and it also has another set (two actually) for child
objects
that are CREATED in that directory (two because there is possibly a set for
containers, i.e., child directories, and a set for child files.)

What specifically are you trying to accomplish? Don't tell us (initially)
how you
think to achieve that goal but tell us what the REAL and FINAL goal is....

--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)


.

Relevant Pages

  • Re: Directories in AD Are Visible to All Users
    ... are you talking about folders on a HD ... If you're talking about containers in AD you can use the List Object Mode. ... > and I assign permissions to a subfoler to certain gorups, ... > have rights to instead every folder in the directory. ...
    (microsoft.public.windows.server.active_directory)
  • How to Print Folder Permissions
    ... It will show ACLs for the folder itself and all child ... >permissions on a few folders that need to be adjusted. ... >However I do not know which folders need adjusting ...
    (microsoft.public.win2000.security)
  • Re: NTFS Security Question.
    ... A subordinate object DOES not inherit the PARENT perms (in ... will assume "Nebulous" permissions that refer to the LINK ... The trick is to PROPOGATE to all FILES (not Folders and Files - that would ... Since Windows 2000 deny NTFS permission does not work ...
    (microsoft.public.windowsxp.security_admin)
  • RE: ISA 2004 REPORT FAILURE
    ... Did as you suggested and turned auditing on for the system and folders ... that is setting the wrong permissions of the folders ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA 2004 REPORT FAILURE
    ... the ISA Reports still fail because ... I can change the permissions manually ... on the ISALogs and ISASummaries folders ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)