preventing non-familiy members(invities) to locally access my folder (NTFS access rights)

  • Thread starter Thread starter download66
  • Start date Start date
D

download66

Hello,

we have invities(friends) for holydays at our home and I would like to
prevent them accessing a single/special folder.
Therefore I created an addtional group called "invities" and addedd
Grace and Bill to this group. In addition I
added my wife and myself to the group "family".

Question:
What local NTFS access rights do I have to set that Grace and Bill
cannot access my/our folder ?


Thank you very much for any help!


John
 
Grant permissions on the folder and its contents to the Family group.
If no other group has any grants, then only accounts in the Family group
will be able to access that folder and its contents.
 
Roger Abell said:
Grant permissions on the folder and its contents to the Family group.
If no other group has any grants, then only accounts in the Family group
will be able to access that folder and its contents.
Click to expand...

Deny permissions to the folder for group 'invities' but be very careful who
is in the group else you may block access for someone who should have
access.
 
Tim Jackson said:
Deny permissions to the folder for group 'invities' but be very careful
who is in the group else you may block access for someone who should have
access.
Click to expand...

Yes, that is an alternative, but . . .

I steer away from using Deny for NTFS permissions whereever
there is a more or equally direct alternative. Use of Deny can be
problematic if it is placed at an upper level in a storage structure
in which there are further variations in grants down within the
substructure.

In this case, if the folder is c:\familystuff and the group is Family
the poster only needs to issue at a cmd prompt

cacls c:\familystuff /t /g family:f

which for XP Home would be the way to do this without use
of a safe mode boot.

Or, as you have just indicated one could implace a Deny for
the Invitee group with

cacls c:\familystuff /t /e /d invitee

Roger
 
Back
Top