Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Membership of local built-in group "Users" -- NTFS permissions


10 Apr 2012   #1

Windows 7 ultimate x64
 
 
Membership of local built-in group "Users" -- NTFS permissions

Dear,

Can somebody help me?

My initial admin account (made with the installation of windows7) is Marie.
When I look at the Local Users and Groups snap-in of MMC, she's member of the group administrators but not of the group Users.

BUT
then I made a folder "Test".
I disabled the inheritance.
Then I gave the group Users deny permissions of this folder.
The administrators group I gave full control permissions.

The strange thing is that Marie gets also deny permissions though she's not a member of the local group Users but she's member of the group Administrators.

Can somebody give me an anwser on this problem?

Thanks in advance!!

Kind Regards.

My System SpecsSystem Spec
.

10 Apr 2012   #2

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Please post screenshot of permissions. Please post screenshot of users members list and administrators list as well.
My System SpecsSystem Spec
10 Apr 2012   #3

Windows 7 ultimate x64
 
 

In the attachment, you can find the different printscreens.

Admin account name: CV
--> Member of administrators group, but not of the Users group
--> Users group: only deny rechten
--> Administrators group: only allow rechten

CV --> everything is denied


Thanks in advance!!!

Kind Regards,


Attached Files
File Type: docx printscreens.docx (225.9 KB, 26 views)
My System SpecsSystem Spec
.


10 Apr 2012   #4

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

members of group Users:
-normal users
-authenticated users
-interactive users

You're in group authenticated users and interactive users!! So als in group Users. It's a group in a group
My System SpecsSystem Spec
10 Apr 2012   #5

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

make the folder permissions as follows:
owner: Administrators (not really neccesary)
permissions (not inherited from above, as it is now already)
permissions: Administrators Full Access (already so)

That is it!! So simply remove the Users group from the folder permissions.
Understand? Works?

If a user isn't member of any group in the list... it has NO access
My System SpecsSystem Spec
10 Apr 2012   #6

Windows 7 ultimate x64
 
 

Thank you very much!!

Can I see somewhere which users are member of the groups
-authenticated users
-interactive users

Thanks in advance!!
My System SpecsSystem Spec
10 Apr 2012   #7

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by cvdh View Post
Thank you very much!!

Can I see somewhere which users are member of the groups
-authenticated users
-interactive users

Thanks in advance!!
Understanding the Authenticated Users Group
interactive users group: A group that includes all users that have logged on interactively. Membership is controlled by the operating system. So not scheduled tasks and services and network connections for example.
My System SpecsSystem Spec
10 Apr 2012   #8

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

example:
allow read access to Users group
deny full access to Interactive Users group

now users can read but only when not interactive so to access a file over the network for example.

example 2:
no entry of Users group in the list
allow access to Interactive Users group

users can access folder but only when logged in locally. File access from remote is denied for example.

example 3:
no entry of Users group in the list
allow access to Interactive Users group
deny access to Administrators

Same as example 2 but not admins (standard users).

example 4:
allow access to Interactive Users group
deny access to Users group

Same as example 2 but not standard users (only admins).
My System SpecsSystem Spec
10 Apr 2012   #9

Windows 7 ultimate x64
 
 

Thank you very much!
My System SpecsSystem Spec
Reply

 Membership of local built-in group "Users" -- NTFS permissions




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:36 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33