NTFS Permissions

>
> What can I say...I'm a thrill-seeker.
>
> --
> KB
>

Then go and do a strip search on Raymond LaFountain hehehe

=?Utf-8?B?RHJhZ29uIFdpdGhvdXQgV2luZ3M=?=

Dragon Without Wings <> rambled:
>
>> What can I say...I'm a thrill-seeker.
>>
>> --
>> KB
>>
>
> Then go and do a strip search on Raymond LaFountain hehehe

I will explicitly apply the deny permission to myself on that one.

--
KB

MCNGP #26
Why don't you make like a tree and go to www.mcngp.com!?

Briscobar

Thanks Dragon,

That's OK as well, but I would really like it if this user can't even 'see'
any other folder or file except SubFolderC.

It's maddening that I actually had it... But I kept hammering the keyboard
and made it go away...

--

Regards,
Slarty Bartfast


- Nudge, nudge, , , say no more!

Slarty Bartfast

If you don't want the user to see all the folder directory except to have an
access to SubFolderC only, the only way I may think of is take that user
account out completly from all folders. Then add him back to SubFolderC only
with Modify permission. With this way, he can not get anywhere except to
that SubFolderC. However, you will have to create a map drive to that
particular folder for him. Otherwise, he will be stopped right at the root
folder level.

"Slarty Bartfast" wrote:

> Thanks Dragon,
>
> That's OK as well, but I would really like it if this user can't even 'see'
> any other folder or file except SubFolderC.
>
> It's maddening that I actually had it... But I kept hammering the keyboard
> and made it go away...
>
> --
>
> Regards,
> Slarty Bartfast
>
>
> - Nudge, nudge, , , say no more!
>
>
>

=?Utf-8?B?RHJhZ29uIFdpdGhvdXQgV2luZ3M=?=

Side Note: As you have mentioned that you need to access some file from the
above folder, you need to make sure you have at least read permission for
those folders as well. Otherwise, you just open one door and then close
another on yourself again.

"Dragon Without Wings" wrote:

> If you don't want the user to see all the folder directory except to have an
> access to SubFolderC only, the only way I may think of is take that user
> account out completly from all folders. Then add him back to SubFolderC only
> with Modify permission. With this way, he can not get anywhere except to
> that SubFolderC. However, you will have to create a map drive to that
> particular folder for him. Otherwise, he will be stopped right at the root
> folder level.
>
> "Slarty Bartfast" wrote:
>
> > Thanks Dragon,
> >
> > That's OK as well, but I would really like it if this user can't even 'see'
> > any other folder or file except SubFolderC.
> >
> > It's maddening that I actually had it... But I kept hammering the keyboard
> > and made it go away...
> >
> > --
> >
> > Regards,
> > Slarty Bartfast
> >
> >
> > - Nudge, nudge, , , say no more!
> >
> >
> >

=?Utf-8?B?RHJhZ29uIFdpdGhvdXQgV2luZ3M=?=

"Slarty Bartfast" wrote:

> Thanks Dragon,
>
> That's OK as well, but I would really like it if this user can't even 'see'
> any other folder or file except SubFolderC.

Access-based Enumeration (ABE) is a solution for Win2k3.
I haven't seen if something similar works for Win2k.

http://www.microsoft.com/windowsserv...rview/abe.mspx

http://www.microsoft.com/downloads/d...displaylang=en

=?Utf-8?B?SGVucmlrIEpvaGFuc3Nvbg==?=

>
> Access-based Enumeration (ABE) is a solution for Win2k3.
> I haven't seen if something similar works for Win2k.
>
> http://www.microsoft.com/windowsserv...rview/abe.mspx
>
> http://www.microsoft.com/downloads/d...displaylang=en
>
>


Ahhh...ABE sweet as apple pie. Unfortunatelly, it's not available in Win2K.

=?Utf-8?B?RHJhZ29uIFdpdGhvdXQgV2luZ3M=?=

Hi All,

Sorry I forgot to mention something that is becoming more apparent...

When I said I was doing this share on a 2000 Server, it was only a test
Server. The real Server is 2003.
The way I have gone now is to give the user LIST at the root 'Accounts'
Folder, DENY LIST on Folders 1, 2 and 4, and MODIFY on Folder3, SubfolderC.

This works OK and will suit my needs - on a 2000 Server - BUT...
Permissions on 2000 Server and 2003 Server don't work quite the same, I am
finding out!

When I try this on the 2003 Server, while the user only shows as having LIST
permissions, he actually has FULL or at least MODIFY!
He can change, delete etc, with only LIST permissions.

I have created a new group called 'Accounts Restrict' for these users with
restricted access.
One other thing I suppose I should know is, but don't - in the 2000 and 2003
Servers, when I added the new group 'Accounts Restrict' how come it doesn't
show in the security tab of all the sub-files, when the 'Accounts' and
'Domain Admins' groups do?

Any suggestions please?

--

Regards,
Slarty Bartfast


- Why are there 5 syllables in the word "monosyllabic"?

Slarty Bartfast

Hi All, Me again...

Just for any who may be interested in the outcome of this yarn, I tested the
permissions of this new group 'Accounts Restrict' with a dummy user that I
keep for testing. I was puzzled why this user could have FULL permissions
when he was a member of a group that only had LIST.

Because I use this dummy User often, at one time I made him a member of the
'Accounts' group that has FULL permissions - and he was still a member...

--

Regards,
Slarty Bartfast


- Darth Vader sleeps with a Teddywookie. Pass it on.

Slarty Bartfast