Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Membership of local built-in group "Users" -- NTFS permissions

10 Apr 2012   #1
cvdh

Windows 7 ultimate x64
 
 
Membership of local built-in group "Users" -- NTFS permissions

Dear,

Can somebody help me?

My initial admin account (made with the installation of windows7) is Marie.
When I look at the Local Users and Groups snap-in of MMC, she's member of the group administrators but not of the group Users.

BUT
then I made a folder "Test".
I disabled the inheritance.
Then I gave the group Users deny permissions of this folder.
The administrators group I gave full control permissions.

The strange thing is that Marie gets also deny permissions though she's not a member of the local group Users but she's member of the group Administrators.

Can somebody give me an anwser on this problem?

Thanks in advance!!

Kind Regards.


My System SpecsSystem Spec
.

10 Apr 2012   #2
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Please post screenshot of permissions. Please post screenshot of users members list and administrators list as well.
My System SpecsSystem Spec
10 Apr 2012   #3
cvdh

Windows 7 ultimate x64
 
 

In the attachment, you can find the different printscreens.

Admin account name: CV
--> Member of administrators group, but not of the Users group
--> Users group: only deny rechten
--> Administrators group: only allow rechten

CV --> everything is denied


Thanks in advance!!!

Kind Regards,


Attached Files
File Type: docx printscreens.docx (225.9 KB, 26 views)
My System SpecsSystem Spec
.


10 Apr 2012   #4
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

members of group Users:
-normal users
-authenticated users
-interactive users

You're in group authenticated users and interactive users!! So als in group Users. It's a group in a group
My System SpecsSystem Spec
10 Apr 2012   #5
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

make the folder permissions as follows:
owner: Administrators (not really neccesary)
permissions (not inherited from above, as it is now already)
permissions: Administrators Full Access (already so)

That is it!! So simply remove the Users group from the folder permissions.
Understand? Works?

If a user isn't member of any group in the list... it has NO access
My System SpecsSystem Spec
10 Apr 2012   #6
cvdh

Windows 7 ultimate x64
 
 

Thank you very much!!

Can I see somewhere which users are member of the groups
-authenticated users
-interactive users

Thanks in advance!!
My System SpecsSystem Spec
10 Apr 2012   #7
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by cvdh View Post
Thank you very much!!

Can I see somewhere which users are member of the groups
-authenticated users
-interactive users

Thanks in advance!!
Understanding the Authenticated Users Group
interactive users group: A group that includes all users that have logged on interactively. Membership is controlled by the operating system. So not scheduled tasks and services and network connections for example.
My System SpecsSystem Spec
10 Apr 2012   #8
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

example:
allow read access to Users group
deny full access to Interactive Users group

now users can read but only when not interactive so to access a file over the network for example.

example 2:
no entry of Users group in the list
allow access to Interactive Users group

users can access folder but only when logged in locally. File access from remote is denied for example.

example 3:
no entry of Users group in the list
allow access to Interactive Users group
deny access to Administrators

Same as example 2 but not admins (standard users).

example 4:
allow access to Interactive Users group
deny access to Users group

Same as example 2 but not standard users (only admins).
My System SpecsSystem Spec
10 Apr 2012   #9
cvdh

Windows 7 ultimate x64
 
 

Thank you very much!
My System SpecsSystem Spec
Reply

 Membership of local built-in group "Users" -- NTFS permissions




Thread Tools





Similar help and support threads
Thread Forum
"Local Area Connection" missing in "Change adapter Settings".. Plz hlp
I have to set up a Broadband connection. But Local Area connection icon is missing. Someone told "drivers" could be missing... I installed few. But the problem is as it was.. please guide me in this regards.. Thank you Screen shots Attached
Network & Sharing
BSoD with "STOP:0x00000024" error and "Ntfs.sys"
Basic system description: Desktop PC about 2 years old with: Motherboard: Asus P5Q-E Processor: Intel Core 2 Quad Q6700 @ 2.66GHz RAM amount: 8GB Operating System: Windows 7 Professional Service Pack 1 OEM 64 bit Graphics Cards (I have two installed and software controllable CrossFire): AMD...
BSOD Help and Support
How to setup users/groups/permissions for a user "home" folder
I own a system running windows 7 enterprise and have an administrator account on it. I would like to setup a "standard user" (not admin) account for a new user. I plan to create a folder for the user inside of which the user will be allowed to create his own subfolders and files. I plan to...
General Discussion
Local Hard Drive (*c) changed to NTFS by clicking on "permissions of r
how to handle this? did system restore.. no change to ntfs local disk. local disk changed to ntfs. cannot open local disk C: no windows action center, not working all including: Device Manager, Remote Settings, System protection not format...
General Discussion
How to change "FAT32" penDrive to "NTFS"? can't format it "NTFS"
I have "Kingston" 4GB pen-drive its file system is "FAT32" i try to change its files system to "NTFS" using "formatting" process. When i try to format it in "NTFS" this error show. "Windows was unable to complete the Format." So how do i change its file system to "NTFS"? :mad: ...
Hardware & Devices
accidently denied "Users" group in share
So in an effort to prohibit others from accessing my E: drive i denied all users how can i revert back to this so that I as an admin can get it back? Now before the screens i will let you know that i have tried everything from reg edit from what i know to enabling admin account in 7 i...
Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:56.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App