Allowing user access to one single file in a folder.

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

I know this sounds simple and i feel the same way however I am trying to make
a request happen from one of our users. He would like someone given access
to only one file in a folder. Access to the folder is controled by groups
and users are given full control of the files at the folder level. This is
the first request to allow someone only access to a single file.

Thanks in advance.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

What is in the long run most simple is to use a new folder
for this, as over time you will have more such files, or you
will forget that there is a unique file within the folder.

However, what you can do is use the fact that an explicit
grant takes control over an inherited deny.
So, if you want all Users to have Full control for all of the
files in the folder, except for UserX who is a member of
Users, then you could
Grant Full for Users
Deny Full for UserX and use the advanced tab to set this
ACE to apply to Files Only
Then, on the file where UserX should be able to read
edit the permission of that file and Grant UserX what
access that account should have for the file.
--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Angryblack" <Angryblack@discussions.microsoft.com> wrote in message
news:BE49884F-810F-4FD0-B8FD-81E5CDB533A6@microsoft.com...
> I know this sounds simple and i feel the same way however I am trying to
make
> a request happen from one of our users. He would like someone given
access
> to only one file in a folder. Access to the folder is controled by groups
> and users are given full control of the files at the folder level. This
is
> the first request to allow someone only access to a single file.
>
> Thanks in advance.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

On Mon, 28 Mar 2005 18:51:03 -0800, "Angryblack"
<Angryblack@discussions.microsoft.com> wrote:

>I know this sounds simple and i feel the same way however I am trying to make
>a request happen from one of our users. He would like someone given access
>to only one file in a folder. Access to the folder is controled by groups
>and users are given full control of the files at the folder level. This is
>the first request to allow someone only access to a single file.

Make sure that account is not in the groups, then give that account
read access to the folder, and whatever access to the file is needed.
No permissions to the other files in the folder.

Jeff

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Thanks a lot guys i thought it might be something as much. Just not sure

Thanks again.

"Angryblack" wrote:

> I know this sounds simple and i feel the same way however I am trying to make
> a request happen from one of our users. He would like someone given access
> to only one file in a folder. Access to the folder is controled by groups
> and users are given full control of the files at the folder level. This is
> the first request to allow someone only access to a single file.
>
> Thanks in advance.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Angryblack wrote:
> I know this sounds simple and i feel the same way however I am trying to make
> a request happen from one of our users. He would like someone given access
> to only one file in a folder. Access to the folder is controled by groups
> and users are given full control of the files at the folder level. This is
> the first request to allow someone only access to a single file.
>
> Thanks in advance.

At the folder level, allow user to list folder contents and deny all the
other permissions. On that particular file, explicitly allow the user
full control. Click on advanced and uncheck the "Allow inheritable
permissions from the parent to propogte this object..." option.

--
Aarohi Johal
MCSE, MCSA, MCDBA