Folder Security

[116]

I am trying to secure a folder, only giving rights to a group. I have added
users to this group and set the permissions (Admins and Group). But with out
the EVERYONE there I can not seem to gain access. After adjusting, I have
reset ALL permissions.

Help
David

 

[Pegasus \(MVP\)]

Re: Folder Security


"116" <116@discussions.microsoft.com> wrote in message
news:648EB7D9-802F-4E15-86DE-B5673DA3901A@microsoft.com...
>I am trying to secure a folder, only giving rights to a group. I have
>added
> users to this group and set the permissions (Admins and Group). But with
> out
> the EVERYONE there I can not seem to gain access. After adjusting, I have
> reset ALL permissions.
>
> Help
> David

Are you talking about share permissions or NTFS permissions? If it is the
latter, let's have a look at your permissions:

cacls "d:\Some Folder" > c:\perms.txt

When you say "I can not seem to gain access", do you mean "I, the
Administrator" or "I, the member of the group"?

 

[116]

Re: Folder Security

NTFS, not shared. After reading many posts, I saw that this should have
EVERYONE with all 3 checked off. The only users are 'Administrator' and
'Group' that I created and added the necessary users. They needs rights to
READ and WRITE. But I wish to DENY them rights to DELETE folders and files.
Once I remove the EVERYONE from the picture, They can no longer gain access,
so I have checked of 'Inherit' so they can regain access. Perhaps the steps
in which I am doing this is wrong? I did find this
http://support.microsoft.com/kb/301195/en-us, but haven't tried the steps yet.

David

"Pegasus (MVP)" wrote:

>
> "116" <116@discussions.microsoft.com> wrote in message
> news:648EB7D9-802F-4E15-86DE-B5673DA3901A@microsoft.com...
> >I am trying to secure a folder, only giving rights to a group. I have
> >added
> > users to this group and set the permissions (Admins and Group). But with
> > out
> > the EVERYONE there I can not seem to gain access. After adjusting, I have
> > reset ALL permissions.
> >
> > Help
> > David
>
> Are you talking about share permissions or NTFS permissions? If it is the
> latter, let's have a look at your permissions:
>
> cacls "d:\Some Folder" > c:\perms.txt
>
> When you say "I can not seem to gain access", do you mean "I, the
> Administrator" or "I, the member of the group"?
>
>
>

 

[Pegasus \(MVP\)]

Re: Folder Security

I cannot see the contents of c:\perms.txt in your reply.

"116" <116@discussions.microsoft.com> wrote in message
news:BBBABDC6-BB7C-4F6B-B0AD-048EE7691416@microsoft.com...
> NTFS, not shared. After reading many posts, I saw that this should have
> EVERYONE with all 3 checked off. The only users are 'Administrator' and
> 'Group' that I created and added the necessary users. They needs rights
> to
> READ and WRITE. But I wish to DENY them rights to DELETE folders and
> files.
> Once I remove the EVERYONE from the picture, They can no longer gain
> access,
> so I have checked of 'Inherit' so they can regain access. Perhaps the
> steps
> in which I am doing this is wrong? I did find this
> http://support.microsoft.com/kb/301195/en-us, but haven't tried the steps
> yet.
>
> David
>
> "Pegasus (MVP)" wrote:
>
>>
>> "116" <116@discussions.microsoft.com> wrote in message
>> news:648EB7D9-802F-4E15-86DE-B5673DA3901A@microsoft.com...
>> >I am trying to secure a folder, only giving rights to a group. I have
>> >added
>> > users to this group and set the permissions (Admins and Group). But
>> > with
>> > out
>> > the EVERYONE there I can not seem to gain access. After adjusting, I
>> > have
>> > reset ALL permissions.
>> >
>> > Help
>> > David
>>
>> Are you talking about share permissions or NTFS permissions? If it is the
>> latter, let's have a look at your permissions:
>>
>> cacls "d:\Some Folder" > c:\perms.txt
>>
>> When you say "I can not seem to gain access", do you mean "I, the
>> Administrator" or "I, the member of the group"?
>>
>>
>>

 

[Hank Arnold (MVP)]

Re: Folder Security

Try adding "Domain Users" with the desired access permissions..... I
always delete "Everyone" from the security permissions....

--

Regards,
Hank Arnold
Microsoft MVP
Windows Server - Directory Services

116 wrote:
> NTFS, not shared. After reading many posts, I saw that this should have
> EVERYONE with all 3 checked off. The only users are 'Administrator' and
> 'Group' that I created and added the necessary users. They needs rights to
> READ and WRITE. But I wish to DENY them rights to DELETE folders and files.
> Once I remove the EVERYONE from the picture, They can no longer gain access,
> so I have checked of 'Inherit' so they can regain access. Perhaps the steps
> in which I am doing this is wrong? I did find this
> http://support.microsoft.com/kb/301195/en-us, but haven't tried the steps yet.
>
> David
>
> "Pegasus (MVP)" wrote:
>
>> "116" <116@discussions.microsoft.com> wrote in message
>> news:648EB7D9-802F-4E15-86DE-B5673DA3901A@microsoft.com...
>>> I am trying to secure a folder, only giving rights to a group. I have
>>> added
>>> users to this group and set the permissions (Admins and Group). But with
>>> out
>>> the EVERYONE there I can not seem to gain access. After adjusting, I have
>>> reset ALL permissions.
>>>
>>> Help
>>> David
>> Are you talking about share permissions or NTFS permissions? If it is the
>> latter, let's have a look at your permissions:
>>
>> cacls "d:\Some Folder" > c:\perms.txt
>>
>> When you say "I can not seem to gain access", do you mean "I, the
>> Administrator" or "I, the member of the group"?
>>
>>
>>

 

[116]

Re: Folder Security

I appoligize. HEre are the perms:
c:\shared\CNC Programs BUILTIN\AdministratorsOI)(CI)F
OFFICE\CNC Programs GroupOI)(CI)(special access

READ_CONTROL
SYNCHRONIZE
FILE_GENERIC_READ
FILE_GENERIC_WRITE
FILE_GENERIC_EXECUTE
FILE_READ_DATA
FILE_WRITE_DATA
FILE_APPEND_DATA
FILE_READ_EA
FILE_WRITE_EA
FILE_EXECUTE
FILE_READ_ATTRIBUTES
FILE_WRITE_ATTRIBUTES

OFFICE\Domain UsersOI)(CI)R

David

"Pegasus (MVP)" wrote:

> I cannot see the contents of c:\perms.txt in your reply.
>
> "116" <116@discussions.microsoft.com> wrote in message
> news:BBBABDC6-BB7C-4F6B-B0AD-048EE7691416@microsoft.com...
> > NTFS, not shared. After reading many posts, I saw that this should have
> > EVERYONE with all 3 checked off. The only users are 'Administrator' and
> > 'Group' that I created and added the necessary users. They needs rights
> > to
> > READ and WRITE. But I wish to DENY them rights to DELETE folders and
> > files.
> > Once I remove the EVERYONE from the picture, They can no longer gain
> > access,
> > so I have checked of 'Inherit' so they can regain access. Perhaps the
> > steps
> > in which I am doing this is wrong? I did find this
> > http://support.microsoft.com/kb/301195/en-us, but haven't tried the steps
> > yet.
> >
> > David
> >
> > "Pegasus (MVP)" wrote:
> >
> >>
> >> "116" <116@discussions.microsoft.com> wrote in message
> >> news:648EB7D9-802F-4E15-86DE-B5673DA3901A@microsoft.com...
> >> >I am trying to secure a folder, only giving rights to a group. I have
> >> >added
> >> > users to this group and set the permissions (Admins and Group). But
> >> > with
> >> > out
> >> > the EVERYONE there I can not seem to gain access. After adjusting, I
> >> > have
> >> > reset ALL permissions.
> >> >
> >> > Help
> >> > David
> >>
> >> Are you talking about share permissions or NTFS permissions? If it is the
> >> latter, let's have a look at your permissions:
> >>
> >> cacls "d:\Some Folder" > c:\perms.txt
> >>
> >> When you say "I can not seem to gain access", do you mean "I, the
> >> Administrator" or "I, the member of the group"?
> >>
> >>
> >>
>
>
>

 

[Pegasus \(MVP\)]

Re: Folder Security


"116" <116@discussions.microsoft.com> wrote in message
news:FBB0CE3E-B862-43AB-B16A-E068AA2445C4@microsoft.com...
>I appoligize [apologize?]. HEre are the perms:
> c:\shared\CNC Programs BUILTIN\AdministratorsOI)(CI)F
> OFFICE\CNC Programs GroupOI)(CI)(special access
>
> READ_CONTROL
> SYNCHRONIZE
> FILE_GENERIC_READ
> FILE_GENERIC_WRITE
>
> FILE_GENERIC_EXECUTE
> FILE_READ_DATA
> FILE_WRITE_DATA
> FILE_APPEND_DATA
> FILE_READ_EA
> FILE_WRITE_EA
> FILE_EXECUTE
>
> FILE_READ_ATTRIBUTES
>
> FILE_WRITE_ATTRIBUTES
>
> OFFICE\Domain UsersOI)(CI)R
>
> David

Try this:
- Log on as Administrator
- Open a Command Prompt
- Type these commands:
cacls "c:\shared\CNC Programs" /t /e /r "OFFICE\CNC Programs Group"
cacls "c:\shared\CNC Programs" /t /e /g "OFFICE\CNC Programs Group":R