Does 'deny a user' always override 'allow everyone'

  • Thread starter Thread starter Malik
  • Start date Start date
M

Malik

I have a folder security setting as:

everyone: allow all
user bob : deny all

Will the 'deny user' rule always override anything else?. ie just because
'allow everyone' is enabled it is impossible for user bob to find a way to
access this folder?

TIA
 
What I have noted from my MS training is that explicated" Deny "Rules All controls over a file or folder that means that if you check " Deny" that rules , if you leave a permissions (open) or un checked not Alloy or Deny Windows defaults to “Deny†. It errors toward tight security.
16bit
 
Malik said:
I have a folder security setting as:

everyone: allow all
user bob : deny all

Will the 'deny user' rule always override anything else?. ie just because
'allow everyone' is enabled it is impossible for user bob to find a way to
access this folder?
Click to expand...

Deny overides anything. Regardless of what permissions bob accumulates
through group membership. But. What if bob authenticates as a different
user? Consider an anonymous IIS account or Guest(if enabled)? All of a
sudden, bob isn't bob anymore.
 
Explicit deny overrides everything.

With the chain below, everyone but BOB could access whatever it is you secure
that way. However if you have any form of guest or anonymous access, BOB can
access the file through some other method than using his userid.

joe
 
Back
Top