Windows 10: How to grant one user access to a folder that is in a Security Group in AD that is denied...

So I have a folder on a server that has an explicit deny for a certain OU but want to give one person, that is in that OU, access to that folder. Is there a way to make a exception for that user or a way to override the deny that is in the security permissions for that specific user?

:)

 

Granting two users different permissions to different folders

Probably not, but if its a windows 10 pro machine you could try creating new groups for the users and trying to give those groups permissions over the top folder while setting the security permissions to also deny access for the opposite group. Perhaps you could even skip the part about taking ownership or permissions and simply deny the opposite group access to the other's folders.

 

destination folder access denied

Hello Tearlessaxis874, I'm sorry that method didn't help you. I have another method that can help you grant permission to all your users since its telling you that you dont have permission even though you are the admin.

Locate the file or folder on which you want to take ownership in windows explorer

Right click on file or folder and select “Properties” from Context Menu

Click on Security tab

Click on “Advance”

Now click on Owner tab in Advance Security Settings for User windows

Click on Edit Button and select user from given Change Owner to list if user or group is not in given list then click on other users or groups. Enter name of user/group and click ok.

Now select User/group and click apply and ok. (Check “Replace owner on subcontainers and objects” if you have files and folder within selected folder)

Click ok when Windows Security Prompt is displayed

Now Owner name must have changed.

Now click Ok to exist from Properties windows

Once you have taken the ownership of file or folder

Grant Permissions to everyone-

Go to C:\Users\ and then click right click on folder "Your user name" and chooseproperties.

Then go to the security tab and click Edit then clickAdd => Advanced.

If you click on advanced now click on Find Now and chooseEveryone and click Ok.

Then again click Ok and now click onAllow => Full control => Ok.

If the issue persists, I would suggest you create a new user account with administrator rights and then try to perform the changes and check if the steps work for you -

http://windows.microsoft.com/en-us/Windows7/Cre...

I hope this solves your issue. Thank you and good luck. Regards -

 

Second user account access to files (documents, pictures) as on primary user account with WIndows 10

Hi,

Groups or users that are granted Full Control permission for a folder can delete files and subfolders within that folder, regardless of the permissions that protect the files and subfolders. If the check boxes under Permissions for <User or Group> are shaded
or if the Remove button is unavailable, the file or folder has inherited permissions from the parent folder. When adding a new user or group, by default, this user or group will have Read & Execute, List Folder Contents, and Read permissions.

Setting File and Folder Permissions

To set permissions for files and folders, follow these steps:

• 
  In Windows Explorer, right-click the file or folder you want to work with.
  
• 
  From the pop-up menu, select Properties, and then in the Properties dialog box click the Security tab, shown in Figure 13-12.
  
• 
  Users or groups that already have access to the file or folder are listed in the Name list box. You can change permissions for these users and groups by doing the following:
  
  • 
    Select the user or group you want to change.
    
  • 
    Use the Permissions list box to grant or deny access permissions.
    
  Tip Inherited permissions are shaded. If you want to override an inherited permission, select the opposite permission.
  
• 
  To set access permissions for additional users, contacts, computers, or groups, click Add. This displays the Select Users, Computers, Or Groups dialog box shown in Figure 13-13.
  
  
  
  Figure 13-12: Use the Security tab to configure basic permissions for the file or folder.
  
• 
  Use the Select Users, Computers, Or Groups dialog box to select the users, computers, or groups for which you want to set access permissions. You can use the fields of this dialog box as follows:
  
  • 
    Look In This drop-down list box allows you to access account names from other domains. Click Look In to see a list of the current domain, trusted domains, and other resources that you can access. Select
    Entire Directory to view all the account names in the folder.
    
  • 
    Name This column shows the available accounts of the currently selected domain or resource.
    
  • 
    Add This button adds selected names to the selection list.
    
  • 
    Check Names This button validates the user, contact, and group names entered into the selection list. This is useful if you type names in manually and want to make sure they're available.
    
• 
  In the Name list box, select the user, computer, or group you want to configure, and then use the fields in the Permissions area to allow or deny permissions. Repeat for other users, computers, or groups.
  
• 
  Click OK when you're finished.
  

For any other concerns, don't hesitate to get back to us.

Regards.