Windows 10: Is it ok to modify Windows users/groups permissions for a specific folder/ files on an EC2...

There are these folders and files which are used as logs. Is it possible to change these following Windows users / groups permissions for better security?NT SERVICE\TrustedInstaller:IF NT SERVICE\TrustedInstaller:IOICIIOF NT AUTHORITY\SYSTEM:IF NT AUTHORITY\SYSTEM:IOICIIOF BUILTIN\Administrators:IF BUILTIN\Administrators:IOICIIOF BUILTIN\Users:IRX BUILTIN\Users:IOICIIOGR,GE

:)

 

folder creation and sharing, i want to create an admin user that have only permission to modify folders and file but not have domain admin access.

Hi Mindspaceoutsourcing,

Welcome to Microsoft Community.

I'm Hahn and I'm here to help you with your concern.

To create an admin user with the permission to modify folders and files but not have domain admin access, you can follow these steps:

Step 1: Create a new user account

1. Log in to the computer or server as an administrator.
   
2. Open the "Control Panel" and navigate to "User Accounts".
   
3. Click on "Manage another account" and then "Add a new user account".
   
4. Enter a username and password for the new user account and click "Create Account".
   

Step 2: Add the user account to the local Administrators group

1. Open the "Control Panel" and navigate to "Administrative Tools".
   
2. Click on "Computer Management".
   
3. In the left pane, click on "Local Users and Groups".
   
4. Click on "Groups" and then double-click on "Administrators".
   
5. Click on "Add" and enter the username of the new user account.
   
6. Click "OK" to add the user account to the Administrators group.
   

Step 3: Create a shared folder and grant the new user account full access

1. Create a folder on the computer or server that you want to share.
   
2. Right-click on the folder and select "Properties".
   
3. Click on the "Sharing" tab and then click "Advanced Sharing".
   
4. Check the box next to "Share this folder".
   
5. Click on the "Permissions" button.
   
6. Click "Add" and enter the username of the new user account.
   
7. Select the new user account from the list and click "OK".
   
8. Grant the new user account full control permissions by checking the box next to "Full Control".
   
9. Click "OK" to save the changes.
   

Step 4: Set file and folder permissions

1. Right-click on the folder you want to modify and select "Properties".
   
2. Click on the "Security" tab and then click "Edit".
   
3. Click "Add" and enter the username of the new user account.
   
4. Select the new user account from the list and click "OK".
   
5. Grant the new user account the necessary permissions by checking the appropriate boxes (e.g., "Modify", "Write", "Read & Execute").
   
6. Click "OK" to save the changes.
   

Step 5: Remove the new user account from any other groups with domain admin access

1. Open the "Control Panel" and navigate to "Administrative Tools".
   
2. Click on "Computer Management".
   
3. In the left pane, click on "Local Users and Groups".
   
4. Click on "Users" and then double-click on the new user account.
   
5. Click on the "Member Of" tab.
   
6. Remove the new user account from any groups that give it domain admin access.
   
7. Click "OK" to save the changes.
   

By following these steps, you should now have an admin user with the necessary permissions to modify folders and files but without domain admin access.

I hope this helps. If there is anything not clear, please do not hesitate to let me know.



Your Sincerely

| Microsoft Community Support Specialist

 

I dont get administrative permissions to a specific folder.

Hi Nathan,

Problems accessing files may be related to permissions. Permissions are rules associated with files and folders that determine whether you can access them or make changes to them. To check the permission of the file or folder, follow these steps:

• Right-click the file or folder, and then click Properties.
• Click the Security tab.
• Under Group or user names, tap or click your name to see the permissions you have.

To open a file, you need to have read permission. To change permissions on a file or folder, follow these steps:

• Right-click the file or folder, and then tap or click Properties.
• Click the Security tab.
• Under Group or user names, tap or click your name to see the permissions you have.
• Click Edit, then select the check boxes for the permissions that you need. Tap or click OK.

Let us know how it goes.

 

How to Customize File Sharing Permissions to Create/Modify/Delete FILES... but not FOLDERS?

Hi,

Incorrect Permission settings created for the Particular file, folder or drive can cause this issue.

I would suggest you to modify the permission settings on the folder or the hard drive on which you are unable to create or modify or delete files.

Follow the below Steps:

1. Right click on the file or directory.

2. Click on “Properties” on the right click menu.

3. Click on “Security” tab.

4. Click on “Advanced” button at the bottom.

5. In Advanced Security Dialog window, click on “Owner” tab.

6. Here you will be able to see current owner (i.e. Trusted Installer).

7. To take ownership of the object, click on the Edit button. Give permission to UAC. Then highlight the user name in the “Change owner to” box that you want to assign as the owner for the object. Click “OK” to finish the process.

8. Back in Advanced Security Settings window, you will see the current owner has changed to the user you just selected.

9. Click “OK” button to exit this window.

10. Click “OK” again to exit completely from the Properties window.

11. Repeat step 1 to 4 to open the object’s Properties window again.

12. Back in object’s Properties window, click on Edit button, and confirm the UAC elevation request.

13. Highlight the Administrators in the “Group or user names” box. If the user ID or group that you want to manage the permissions for the object doesn’t exist, click on “Add” button, and type in the user name or group name desired into the “Enter object names
to select (Can use Everyone as user Name)” box, and finish off by clicking on “OK”.

14. In the Permissions for Administrators box below (or any other user name or group name you chose), click on “Full Control” under the “Allow” column to assign full access rights control permissions to Administrators group.

Refer this link

http://windows.microsoft.com/en-us/windows-vist...

Let me know if that helps.

Kind Regards,

Engr. Jamshed Muhammad