Folder Security

[Guest 116]

I am trying to secure a folder, only giving rights to a group. I have added

users to this group and set the permissions (Admins and Group). But with out

the EVERYONE there I can not seem to gain access. After adjusting, I have

reset ALL permissions.

 

Help

David

[Guest Pegasus \(MVP\)]

Re: Folder Security

 

 

"116" <116@discussions.microsoft.com> wrote in message

news:648EB7D9-802F-4E15-86DE-B5673DA3901A@microsoft.com...

>I am trying to secure a folder, only giving rights to a group. I have

>added

> users to this group and set the permissions (Admins and Group). But with

> out

> the EVERYONE there I can not seem to gain access. After adjusting, I have

> reset ALL permissions.

>

> Help

> David

 

Are you talking about share permissions or NTFS permissions? If it is the

latter, let's have a look at your permissions:

 

cacls "d:\Some Folder" > c:\perms.txt

 

When you say "I can not seem to gain access", do you mean "I, the

Administrator" or "I, the member of the group"?

[Guest 116]

Re: Folder Security

 

NTFS, not shared. After reading many posts, I saw that this should have

EVERYONE with all 3 checked off. The only users are 'Administrator' and

'Group' that I created and added the necessary users. They needs rights to

READ and WRITE. But I wish to DENY them rights to DELETE folders and files.

Once I remove the EVERYONE from the picture, They can no longer gain access,

so I have checked of 'Inherit' so they can regain access. Perhaps the steps

in which I am doing this is wrong? I did find this

http://support.microsoft.com/kb/301195/en-us, but haven't tried the steps yet.

 

David

 

"Pegasus (MVP)" wrote:

>

> "116" <116@discussions.microsoft.com> wrote in message

> news:648EB7D9-802F-4E15-86DE-B5673DA3901A@microsoft.com...

> >I am trying to secure a folder, only giving rights to a group. I have

> >added

> > users to this group and set the permissions (Admins and Group). But with

> > out

> > the EVERYONE there I can not seem to gain access. After adjusting, I have

> > reset ALL permissions.

> >

> > Help

> > David

>

> Are you talking about share permissions or NTFS permissions? If it is the

> latter, let's have a look at your permissions:

>

> cacls "d:\Some Folder" > c:\perms.txt

>

> When you say "I can not seem to gain access", do you mean "I, the

> Administrator" or "I, the member of the group"?

>

>

>

[Guest Pegasus \(MVP\)]

Re: Folder Security

 

I cannot see the contents of c:\perms.txt in your reply.

 

"116" <116@discussions.microsoft.com> wrote in message

news:BBBABDC6-BB7C-4F6B-B0AD-048EE7691416@microsoft.com...

> NTFS, not shared. After reading many posts, I saw that this should have

> EVERYONE with all 3 checked off. The only users are 'Administrator' and

> 'Group' that I created and added the necessary users. They needs rights

> to

> READ and WRITE. But I wish to DENY them rights to DELETE folders and

> files.

> Once I remove the EVERYONE from the picture, They can no longer gain

> access,

> so I have checked of 'Inherit' so they can regain access. Perhaps the

> steps

> in which I am doing this is wrong? I did find this

> http://support.microsoft.com/kb/301195/en-us, but haven't tried the steps

> yet.

>

> David

>

> "Pegasus (MVP)" wrote:

>

>>

>> "116" <116@discussions.microsoft.com> wrote in message

>> news:648EB7D9-802F-4E15-86DE-B5673DA3901A@microsoft.com...

>> >I am trying to secure a folder, only giving rights to a group. I have

>> >added

>> > users to this group and set the permissions (Admins and Group). But

>> > with

>> > out

>> > the EVERYONE there I can not seem to gain access. After adjusting, I

>> > have

>> > reset ALL permissions.

>> >

>> > Help

>> > David

>>

>> Are you talking about share permissions or NTFS permissions? If it is the

>> latter, let's have a look at your permissions:

>>

>> cacls "d:\Some Folder" > c:\perms.txt

>>

>> When you say "I can not seem to gain access", do you mean "I, the

>> Administrator" or "I, the member of the group"?

>>

>>

>>

[Guest Hank Arnold (MVP)]

Re: Folder Security

 

Try adding "Domain Users" with the desired access permissions..... I

always delete "Everyone" from the security permissions....

 

--

 

Regards,

Hank Arnold

Microsoft MVP

Windows Server - Directory Services

 

116 wrote:

> NTFS, not shared. After reading many posts, I saw that this should have

> EVERYONE with all 3 checked off. The only users are 'Administrator' and

> 'Group' that I created and added the necessary users. They needs rights to

> READ and WRITE. But I wish to DENY them rights to DELETE folders and files.

> Once I remove the EVERYONE from the picture, They can no longer gain access,

> so I have checked of 'Inherit' so they can regain access. Perhaps the steps

> in which I am doing this is wrong? I did find this

> http://support.microsoft.com/kb/301195/en-us, but haven't tried the steps yet.

>

> David

>

> "Pegasus (MVP)" wrote:

>

>> "116" <116@discussions.microsoft.com> wrote in message

>> news:648EB7D9-802F-4E15-86DE-B5673DA3901A@microsoft.com...

>>> I am trying to secure a folder, only giving rights to a group. I have

>>> added

>>> users to this group and set the permissions (Admins and Group). But with

>>> out

>>> the EVERYONE there I can not seem to gain access. After adjusting, I have

>>> reset ALL permissions.

>>>

>>> Help

>>> David

>> Are you talking about share permissions or NTFS permissions? If it is the

>> latter, let's have a look at your permissions:

>>

>> cacls "d:\Some Folder" > c:\perms.txt

>>

>> When you say "I can not seem to gain access", do you mean "I, the

>> Administrator" or "I, the member of the group"?

>>

>>

>>

[Guest 116]

Re: Folder Security

 

I appoligize. HEre are the perms:

c:\shared\CNC Programs BUILTIN\Administrators:(OI)(CI)F

OFFICE\CNC Programs Group:(OI)(CI)(special access:)

 

READ_CONTROL

SYNCHRONIZE

FILE_GENERIC_READ

FILE_GENERIC_WRITE

FILE_GENERIC_EXECUTE

FILE_READ_DATA

FILE_WRITE_DATA

FILE_APPEND_DATA

FILE_READ_EA

FILE_WRITE_EA

FILE_EXECUTE

FILE_READ_ATTRIBUTES

FILE_WRITE_ATTRIBUTES

 

OFFICE\Domain Users:(OI)(CI)R

 

David

 

"Pegasus (MVP)" wrote:

> I cannot see the contents of c:\perms.txt in your reply.

>

> "116" <116@discussions.microsoft.com> wrote in message

> news:BBBABDC6-BB7C-4F6B-B0AD-048EE7691416@microsoft.com...

> > NTFS, not shared. After reading many posts, I saw that this should have

> > EVERYONE with all 3 checked off. The only users are 'Administrator' and

> > 'Group' that I created and added the necessary users. They needs rights

> > to

> > READ and WRITE. But I wish to DENY them rights to DELETE folders and

> > files.

> > Once I remove the EVERYONE from the picture, They can no longer gain

> > access,

> > so I have checked of 'Inherit' so they can regain access. Perhaps the

> > steps

> > in which I am doing this is wrong? I did find this

> > http://support.microsoft.com/kb/301195/en-us, but haven't tried the steps

> > yet.

> >

> > David

> >

> > "Pegasus (MVP)" wrote:

> >

> >>

> >> "116" <116@discussions.microsoft.com> wrote in message

> >> news:648EB7D9-802F-4E15-86DE-B5673DA3901A@microsoft.com...

> >> >I am trying to secure a folder, only giving rights to a group. I have

> >> >added

> >> > users to this group and set the permissions (Admins and Group). But

> >> > with

> >> > out

> >> > the EVERYONE there I can not seem to gain access. After adjusting, I

> >> > have

> >> > reset ALL permissions.

> >> >

> >> > Help

> >> > David

> >>

> >> Are you talking about share permissions or NTFS permissions? If it is the

> >> latter, let's have a look at your permissions:

> >>

> >> cacls "d:\Some Folder" > c:\perms.txt

> >>

> >> When you say "I can not seem to gain access", do you mean "I, the

> >> Administrator" or "I, the member of the group"?

> >>

> >>

> >>

>

>

>

[Guest Pegasus \(MVP\)]

Re: Folder Security

 

 

"116" <116@discussions.microsoft.com> wrote in message

news:FBB0CE3E-B862-43AB-B16A-E068AA2445C4@microsoft.com...

>I appoligize [apologize?]. HEre are the perms:

> c:\shared\CNC Programs BUILTIN\Administrators:(OI)(CI)F

> OFFICE\CNC Programs Group:(OI)(CI)(special access:)

>

> READ_CONTROL

> SYNCHRONIZE

> FILE_GENERIC_READ

> FILE_GENERIC_WRITE

>

> FILE_GENERIC_EXECUTE

> FILE_READ_DATA

> FILE_WRITE_DATA

> FILE_APPEND_DATA

> FILE_READ_EA

> FILE_WRITE_EA

> FILE_EXECUTE

>

> FILE_READ_ATTRIBUTES

>

> FILE_WRITE_ATTRIBUTES

>

> OFFICE\Domain Users:(OI)(CI)R

>

> David

 

Try this:

- Log on as Administrator

- Open a Command Prompt

- Type these commands:

cacls "c:\shared\CNC Programs" /t /e /r "OFFICE\CNC Programs Group"

cacls "c:\shared\CNC Programs" /t /e /g "OFFICE\CNC Programs Group":R