Networks

Ask something
Discussion Locked

Windows Server 2000 Security

0 helpful
6 replies

by clt-it_tech

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Existing system, everybody has full permission to directory "U:\library". We need to grant two people full control and limit everyone else down to just read only access... In trying this for myself it seems that the limiting I do on "Everyone" extends to the two individuals I give full control to. How do I accomplish this change of access? I will award the points only to one who gets me complete solution...

6 replies

by zaferus

Create a group that needs the full rights and put these users in it. Add this group to the permissions and assign them full control.

Lower the "everyone" priv's to read only.

Run calcs.exe to see what priv's the average user has. If it is too high they probably have rights filtering through, if so break the inheritance or go to the higher level and lower the rights there as well.

Viola!

-Z

by zaferus

Don't use the "deny" part when editing permissions. This is the black flag that overrides everyone reguardless of whether another permission gives them access.

by zaferus

To remove the inheritance on a folder:

If you go into the security tab on the folder - advanced you have a checkbox to allow inheritable permissions. Uncheck this and make a copy. Than go and assign your users who need access permission, the administrators group (so you don't get locked out of the files) and delete the everyone group (remember don't use the deny checkbox).

This discussion is closed to new replies.