Windows 10: [NTFS ACL Security]How can I open a folder with the user account is not in the group of the...

Hello.

I am testing a folder security settings NTFS on Windows.

The folder has no security settings about aaa-test group

However a user in the group can access the folder without any problem.


Which one do I need to set for the group is not be able to access the folder without Deny setting?

Because there are a lot of other folders, it is impossible for each folder to set Deny


Here is the detail testing information.


1. First, I created an aaa account in Users, and this account is in the aaa-test group.



2. Create a folder "Deny-aaa_group". There are only 3 groups can open the folder Authenticated users, SYSTEM, Administrators




3. However, if you log in with the aaa account and try to access the folder, The folder can be opened with aaa account




Please tell me a solution. I have been struggling for hours because of this.

:)

 

List users from security groups who has access to certain shared folder

Hello Community,

We have a shared folder structure, in which permissions are set on a security group base and not on an individual user base. Managers frequently are asking for reports that lists the actual users that have
permission to enter the folder(s). So we are looking for a way we can automatically generate a report to select a specific folder (and their subfolders) and as a result we get the Security groups per folder.

For instance:

Shared folder name: Share

NTFS Permission on share: ShareUsersRead, ShareUsersWrite

Members of ShareUsersRead: John Doe, John Smith

Members of ShareUsersWrite: John Williams

I am getting The result as ShareUsersRead , ShareUsersWrite but not the users who are present in the ShareUsersRead along with their ACL's

Kindly revert if any more info is needed.

Thank you in Advance.

 

xp ntfs permissions erased - help!

NEVER, ever, remove FULL CONTROL permissions in the Access Control Lists/rights priveleges from:

• Administators Group

• YOUR local Administrator User

• SYSTEM

on NTFS rights on your disks (via Explorer.exe rightclick properties menu, security tab) that use that filesystem, OR in the REGISTRY either, via rightclick on HIVES/KEYS permissions popup menu options...

(Sure way to lock yourself out, period, & I have done it myself early on w/ NTFS filesystems &/or the Registry before... only way to learn sometimes, is making mistakes!)

* Keep this in mind, those of you that start experimenting w/ security @ these 2 levels!

APK

P.S.=> Leaving them @ FULL POWER, in both areas, usually 9/10 times allows you to get back into your rig (logging on as your LOCAL ADMINISTRATOR USER, to fix it), & make alterations to rights/acl's as needed, to "get it right", eventually... especially when you're still learning/experimenting! apk

 

Folder won't open due to permission issue

Hello,

Thank you for posting your query on Microsoft community. I understand your concern. Let me help you.

I suggest you to sign out from the current account, restart the computer and log in with Administrators account and

check if it helps to resolve the issue.

I suggest you to refer to the steps below and check if it helps to resolve the issue.

• 
  Press and hold or right-click the file or folder, and then click
  Properties.
  
• 
  Tap or click the Security tab.
  
• 
  Under Group or user names, tap or click your name to see the permissions that you have.
  
  To open a file, you have to have the Read permission. To change the permissions of a file or folder, follow these steps.
  
  Important you must be logged on as an administrator to change permissions on files and folders.
  

• 
  Press and hold or right-click the file or folder, and then tap or click
  Properties.
  
• 
  Tap or click the Security tab.
  
• 
  Under Group or user names, tap or click your name to see the permissions that you have.
  
• 
  Tap or click Edit, tap or click your name, select the check boxes for the permissions that you must have, and then click
  OK.
  

Hope this helps. If the issue remains unresolved, please get back to us with more information and we’d be happy to help.