NTFS & explicit permissions

  • Thread starter Thread starter Daniel Weber
  • Start date Start date
D

Daniel Weber

Hello Everyone,

what must be done to give only Administrators and SYSTEM full access to a
NTFS partition and and few other users only (they access the partition via
virtuel FTP directories) access to one directory each?

I tried to give the partition root only full access for Administrators and
SYSTEM and each FTP-user full access for his directory only, but then each
FTP-user has access to all other FTP-users directories.

If I additionally deny full access in the partition root for the
FTP-Users-Group, then no FTP-users has access to his directory?

Bye & thanks in advance,
Daniel
 
The "Deny" permission always takes precidence over
anything else. For example:

UserA belongs to GroupA

DirectoryA has the following assigned NTFS permissons:
UserA--Full Control
GroupA--Deny

The "Deny" permission takes precidence so UserA cannot
access DirectoryA.

To resolve assign the following NTFS permissions to
DirecotryA:
UserA--Full Control

**That's it. Do not assign the GroupA anything. If NTFS
permissions are not assigned explicitly, then users will
not have access.

Why then is there a DENY permission? See this example:

UserA belongs to GroupA

DirectoryA NTFS permissions are as follows:
GroupA--Full Control
UserA--Deny

**Even though GroupA has full control, and UserA is part
of that group, becuase Deny always takes precedence I can
single out this user from the group permission.

Hope that helps....
 
Trevor said:
To resolve assign the following NTFS permissions to
DirecotryA:
UserA--Full Control

**That's it. Do not assign the GroupA anything. If NTFS
permissions are not assigned explicitly, then users will
not have access.
Click to expand...

Thats what I tried first, but if I don't deny my FTP users the access, they
have access to all folders (altough they are not listed in any access list).

Bye,
Daniel
 
Back
Top