Q

How to resolve conflicting Deny/Allow permissions

When logging into the server (Windows 2003), the client only get access to a personal folder -- no shares from our logon script. This user is a member of two security groups. When browsing the server, the user only has access to folders from one of the security groups, not both. Access is denied to the other folders. Changing permissions on the local computer from Privileged User to Local Admin fixes this and all shares work and appear in "my computer." What is wrong?
Sounds like you have given Deny permissions somewhere along the line. Deny permissions will always trump Allow permissions. Check the permissions for the security group under which you're experiencing problems and see if you have a Deny entry somewhere in the file system or share hierarchy.
This was first published in December 2005

Dig Deeper

PRO+

Content

Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchVirtualDesktop

  • Virtual desktop security guide

    To secure virtual desktops, consider antivirus, certificates and network vulnerabilities. Just remember, VDI doesn't always ...

  • Guide to low-cost desktop virtualization

    In this guide, learn to virtualize desktops without spending more than you would when deploying PCs, and what VDI vendors are ...

  • VDI pilot project guide

    A VDI pilot project should start with a VDI project plan. Know what pitfalls to avoid and test product options to achieve a ...

SearchWindowsServer

SearchExchange

Close