Cris
Tue Sep 09 19:24:42 CDT 2003
This is a multi-part message in MIME format.
------=_NextPart_000_0036_01C37708.05235070
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Change the permissions for C and D drive for the Group Everyone to List. =
Do Not set the Group Everyone permissions to NO ACCESS for anything. =
It will override any allow permissions. Even if Domain Users have =
access you could add "tom" and set permission to NO ACCESS for =
everything but the one item you want
--=20
Cris Hanna [SBS - MVP]
Please DO NOT email me directly but respond only in the newsgroup so =
that all can benefit.
"chuck" <jhardy012003@yahoo.com.au> wrote in message =
news:07a801c3772b$c22a5880$a101280a@phx.gbl...
Hi=20
I am struggling with permissions problem.
I have created a user called tom. tom is a member of a=20
group called employee.
I want tom to have no access to c drive and access to only=20
one file on d drive which is in a directory on d drive.
Tom's "member of" properties only lists him as a member of=20
domain users/users and the employee group.
I cannot remove the domain users group from his "member=20
of" properties.
What if i give the employee group access to c drive with=20
only list permissions and access to d drive with list=20
permissions to the folder and write/modify/read access to=20
the file? =20
There is just one problem. The default permissions for c=20
drive and d drive is everyone full control. How does this=20
effect the permissions i set for the employee group on the=20
same folder. Does the everyone group permissions override=20
everything and if so, what if I set deny everything on C=20
drive and deny everything on d drive except that file?
How can i get around this issue? What is the easiest way=20
around this?
------=_NextPart_000_0036_01C37708.05235070
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1226" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Change the permissions for C and D =
drive for the=20
Group Everyone to List. Do Not set the Group Everyone permissions =
to NO=20
ACCESS for anything. It will override any allow permissions. =
Even if=20
Domain Users have access you could add "tom" and set permission to NO =
ACCESS for=20
everything but the one item you want</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><BR>-- <BR>Cris Hanna [SBS - MVP]<BR>Please DO NOT email me =
directly but=20
respond only in the newsgroup so that all can benefit.</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"chuck" <<A=20
=
href=3D"mailto:jhardy012003@yahoo.com.au">jhardy012003@yahoo.com.au</A>&g=
t;=20
wrote in message <A=20
=
href=3D"news:07a801c3772b$c22a5880$a101280a@phx.gbl">news:07a801c3772b$c2=
2a5880$a101280a@phx.gbl</A>...</DIV>Hi=20
<BR><BR>I am struggling with permissions problem.<BR><BR>I have =
created a user=20
called tom. tom is a member of a <BR>group called=20
employee.<BR><BR>I want tom to have no access to c drive and access to =
only=20
<BR>one file on d drive which is in a directory on d =
drive.<BR><BR>Tom's=20
"member of" properties only lists him as a member of <BR>domain =
users/users=20
and the employee group.<BR><BR>I cannot remove the domain users group =
from his=20
"member <BR>of" properties.<BR><BR>What if i give the employee group =
access to=20
c drive with <BR>only list permissions and access to d drive with list =
<BR>permissions to the folder and write/modify/read access to <BR>the=20
file? <BR><BR>There is just one problem. The default =
permissions=20
for c <BR>drive and d drive is everyone full control. How does =
this=20
<BR>effect the permissions i set for the employee group on the =
<BR>same=20
folder. Does the everyone group permissions override =
<BR>everything and=20
if so, what if I set deny everything on C <BR>drive and deny =
everything on d=20
drive except that file?<BR><BR>How can i get around this issue? =
What is=20
the easiest way <BR>around this?<BR><BR></BLOCKQUOTE></BODY></HTML>
------=_NextPart_000_0036_01C37708.05235070--