| Username |
Post |
| Biruwa |
Posted
on 04-Feb-03 11:46 AM
I am trying to allow access to a folder to a single person know as 'ram' while denying access to everyone else. The person 'ram' also belongs to the group called 'everyone'.
In the win 2000 security tab I denyed all permissions to 'everyone' and then allowed all permissions to 'ram'.
However when I do this even 'ram' cannot' access the folder in question.
Can anybody tell me why this is so? And what is the remedy?
|
| nhuchche |
Posted
on 04-Feb-03 11:50 AM
If Ram belongs to group "Everyone" and you've denied access to the group "Everyone" then of course Ram is not gonna be able to access it.
What you should do is put Ram in a group called USERS and provide access to the individual Ram and the group Administrators only.
|
| Himalayas |
Posted
on 04-Feb-03 06:45 PM
You should not do that way.....
while giving permission
uncheck inherite permission.........
that will remove everybody
then add ram and give him appropriate permission.
|
| Vision |
Posted
on 04-Feb-03 07:49 PM
Biruwa,
When you have one person with two different level of access, the higher level of access control takes precedence over the lower level. In other words, 'deny' takes precedence over 'allow". Since you have denied permission to 'everyone' group, and since ram belongs to 'everyone' group, his permission to the folder will be denied regardless of his individually set access. Do what himalayas says...
|
| Biruwa |
Posted
on 05-Feb-03 12:09 PM
Himalayas and other comp. enthusiasts,
I unchecked the checkbox for 'Allow inheritable permissions from parent to propagate to this object.
I also unchecked 'Reset permissions on all child objects and enable propagation of inheritable permisions.'
I denyed access to 'everyone' and then allowed access to 'ram'. But still 'ram' can't access the folder.
Also 'ram' needs to belong to the 'everyone' group for other purposes.
|
| Biruwa |
Posted
on 05-Feb-03 12:18 PM
Infact I had tried the above before putting my question here.
When I uncheck the allow inheritable box I am given the option of copying perviously inherited permission OR remove the inherited permission and keep only the permissions explicitly specified on this object.
I tried both 'copy' option and the ' remove' option.
Still it is not allowing 'ram' to access while denying access to all.
What can I do now?
|
| Vision |
Posted
on 05-Feb-03 05:07 PM
Biruwa,
first of all, you have to check to see if you have access to the folder yourself as the administrator. Sometimes, it is possible that you have denied access to everyone including the administrator or the owner who originally created the folder. In such instance, you will have to take away or re-claim the ownership of the file.
Go to folders properties/security/advanced and under permission tab, check to see if you as the administrator, or whoever you want to give access to are added. If you don't see anything in the box, you have probably denied access to everyone. In that case, under 'owner' tab, switch the ownership to administrator or yourself and start over.
When setting access to floders, you should do it on 'folder level'. Once you are in folders' properties, go to 'sharing' tab,instead of 'security' tab, share the folder and click on 'permission' to set access to 'users' or 'groups'. If you are setting access under a 'security' tab, you are setting access on 'ntfs level' which is very sensitive and usually make matters really complicated.
|
