Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Permission Puzzle: Can't Exclude User but Allow Others to Access

06 Jan 2014   #11
tobor8thman

Windows 7 Professional 32 bit
 
 

[QUOTE=chev65;2648699]
Quote   Quote: Originally Posted by tobor8thman View Post
@chev65
With Homegroups this very simple. It's best not to mess with the NTFS permission settings unless it's absolutely necessary. In this case it's not required. We will assume that the NTFS permissions are still at the default settings.
I need to try it with Homegroups--I am making a mess of share and NTFS permissions. I will try your suggestion tonight. Thanks.


My System SpecsSystem Spec
.
07 Jan 2014   #12
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Let's forget about shares in this discussion. It's the NTFS permissions that should be modified.

J drive: Do you really want EVERYONE to be able to do everything? (full control)
A folder on J [parentfolder]: Do you really want EVERYONE to be able to do everything? (full control).
Or do you want only user1-4 to have full access?
My System SpecsSystem Spec
07 Jan 2014   #13
tobor8thman

Windows 7 Professional 32 bit
 
 

Quote   Quote: Originally Posted by Kaktussoft View Post
Let's forget about shares in this discussion. It's the NTFS permissions that should be modified.

J drive: Do you really want EVERYONE to be able to do everything? (full control)
A folder on J [parentfolder]: Do you really want EVERYONE to be able to do everything? (full control).
Or do you want only user1-4 to have full access?
No, not really, I thought I was just following network best practices--initially establish the least restrictive NFTS permissions in the parent folder and THEN be restrictive in the child folders

All I want to do is to have user accounts 1-4 to have full control over sub-folders 1-5, and user account 5 to have full control over sub-folder 5, BUT have NO access to sub-folders 1-4.
My System SpecsSystem Spec
.

07 Jan 2014   #14
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

In case you were wondering, I've tested this sharing procedure and given the same advice countless times with great success.

Every step I've mentioned has been verified to work perfectly by every person who has followed those instructions.

The problems start when people unknowingly dive into the NTFS settings and start messing up default permissions, because of this, returning them to default and unchecking any inherited permissions my be required.
My System SpecsSystem Spec
07 Jan 2014   #15
tobor8thman

Windows 7 Professional 32 bit
 
 

Quote   Quote: Originally Posted by chev65 View Post
In case you were wondering, I've tested this sharing procedure and given the same advice countless times with great success.

Every step I've mentioned has been verified to work perfectly by every person who has followed those instructions.

The problems start when people unknowingly dive into the NTFS settings and start messing up default permissions, because of this, returning them to default and unchecking any inherited permissions my be required.
No worries, your approach sounds logical. But I did mess with the NTFS settings, but only by accessing via Workgroup directory, not the Homegroup directory. Do I need to worry about non-default NTFS settings appearing and causing difficulties if user accounts 1-4 (and not user account 5) will be browsing the shares through Homegroup rather than Workgroup? Thx
My System SpecsSystem Spec
07 Jan 2014   #16
tobor8thman

Windows 7 Professional 32 bit
 
 
IT WORKS! but One additional Question

Quote   Quote: Originally Posted by tobor8thman View Post
Quote   Quote: Originally Posted by chev65 View Post
In case you were wondering, I've tested this sharing procedure and given the same advice countless times with great success.

Every step I've mentioned has been verified to work perfectly by every person who has followed those instructions.

The problems start when people unknowingly dive into the NTFS settings and start messing up default permissions, because of this, returning them to default and unchecking any inherited permissions my be required.
No worries, your approach sounds logical. But I did mess with the NTFS settings, but only by accessing via Workgroup directory, not the Homegroup directory. Do I need to worry about non-default NTFS settings appearing and causing difficulties if user accounts 1-4 (and not user account 5) will be browsing the shares through Homegroup rather than Workgroup? Thx
@chev65,

Ok, I've structured the share permissions like you suggested and not messed around with the NTFS settings. . . AND IT WORKS! User account 5 has been excluded from all FOUR folders and has access to the FIFTH folder, while user accounts 1-4 have access to all FIVE folders. MANY THANKS, and you will be repped. BUT . . . I have one more additional question--Let say I have a user account 6 which I want to put ON THE SAME PC as the excluded user account 5. BUT user account 6 must have access to all FIVE folders. How do I do that? Below is what I did so far:

  • I selected the menu item Share with a Specific Person and choose user account 6, but the permissions for FOUR of the FIVE folders nevertheless denied user account 6 access. Why? The FIFTH folder had "Everyone" and "Homegroup" in its share permissions; the other FOUR folders had "Homegroup" but no "Everyone."
  • If I make the FIFTH PC (containing user accounts 5 and 6) a member of the Homegroup, then user account 5 will have access to all FIVE files, which is not allowed.
So, is there a way to do this? Thx.
My System SpecsSystem Spec
07 Jan 2014   #17
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

So user folder 1 to 4: Permissions allow HOMEGROUP. Most likely you removed EVERYONE and made the permission explicit instead of inherit(?)

user folder 5: Permissions allow HOMEGROUP and EVERYONE. Don't know yet if they are inherited or explicit on folder.
--------------
User folder 1 to 4 are accessible by all members of group HOMEGROUP. Give group MYGROUP access as well to user folder 1 to 4 (NTFS permissions). But first create the group and put the useraccount6 in that group.

Later you can add useraccount7 to MYGROUP to give him access as well.
My System SpecsSystem Spec
07 Jan 2014   #18
tobor8thman

Windows 7 Professional 32 bit
 
 

Quote   Quote: Originally Posted by Kaktussoft View Post
So user folder 1 to 4: Permissions allow HOMEGROUP. Most likely you removed EVERYONE and made the permission explicit instead of inherit(?)

user folder 5: Permissions allow HOMEGROUP and EVERYONE. Don't know yet if they are inherited or explicit on folder.
--------------
User folder 1 to 4 are accessible by all members of group HOMEGROUP. Give group MYGROUP access as well to user folder 1 to 4 (NTFS permissions). But first create the group and put the useraccount6 in that group.

Later you can add useraccount7 to MYGROUP to give him access as well.
Just made User Account 6 a member of MYGROUP through lusrmgr.msc. Added MYGROUP to NTFS permissions of folders 1-4 and set for "Full Control". RESULT: User Account 6 is denied access. I think you have to put Everyone in the NTFS permissions--it appears to work when you do that. But if you do that, then User 5 will have access to folders 1-4. I don't understand why your approach would not work, you should be able to list an individual user account or groups containing the user account under the permissions without including "Everyone" too to make it work, shouldn't you?
My System SpecsSystem Spec
08 Jan 2014   #19
Kaktussoft

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Quote   Quote: Originally Posted by tobor8thman View Post
Quote   Quote: Originally Posted by Kaktussoft View Post
So user folder 1 to 4: Permissions allow HOMEGROUP. Most likely you removed EVERYONE and made the permission explicit instead of inherit(?)

user folder 5: Permissions allow HOMEGROUP and EVERYONE. Don't know yet if they are inherited or explicit on folder.
--------------
User folder 1 to 4 are accessible by all members of group HOMEGROUP. Give group MYGROUP access as well to user folder 1 to 4 (NTFS permissions). But first create the group and put the useraccount6 in that group.

Later you can add useraccount7 to MYGROUP to give him access as well.
Just made User Account 6 a member of MYGROUP through lusrmgr.msc. Added MYGROUP to NTFS permissions of folders 1-4 and set for "Full Control". RESULT: User Account 6 is denied access. I think you have to put Everyone in the NTFS permissions--it appears to work when you do that. But if you do that, then User 5 will have access to folders 1-4. I don't understand why your approach would not work, you should be able to list an individual user account or groups containing the user account under the permissions without including "Everyone" too to make it work, shouldn't you?
You're totally right. Please post screenshot of userfolder1 permissions. Please post screenshot of mygroup members as well.
My System SpecsSystem Spec
08 Jan 2014   #20
chev65

Windows 7 Ult, Windows 8.1 Pro,
 
 

Quote   Quote: Originally Posted by tobor8thman View Post
Quote   Quote: Originally Posted by Kaktussoft View Post
So user folder 1 to 4: Permissions allow HOMEGROUP. Most likely you removed EVERYONE and made the permission explicit instead of inherit(?)

user folder 5: Permissions allow HOMEGROUP and EVERYONE. Don't know yet if they are inherited or explicit on folder.
--------------
User folder 1 to 4 are accessible by all members of group HOMEGROUP. Give group MYGROUP access as well to user folder 1 to 4 (NTFS permissions). But first create the group and put the useraccount6 in that group.

Later you can add useraccount7 to MYGROUP to give him access as well.
Just made User Account 6 a member of MYGROUP through lusrmgr.msc. Added MYGROUP to NTFS permissions of folders 1-4 and set for "Full Control". RESULT: User Account 6 is denied access. I think you have to put Everyone in the NTFS permissions--it appears to work when you do that. But if you do that, then User 5 will have access to folders 1-4. I don't understand why your approach would not work, you should be able to list an individual user account or groups containing the user account under the permissions without including "Everyone" too to make it work, shouldn't you?
Which is why my way "the right way" is also the "ONLY" way to do this. I'm not about to go back and forth with anyone on this because as I've already mentioned, it's been tried many times and proven to work, there is no need to use any other method for this. There is also an easy way "same method" to allow access for this new user 6.

It's also easier to use the "Public" folders for this type of sharing because access to the Public folders is not limited with NTFS permissions.
My System SpecsSystem Spec
Reply

 Permission Puzzle: Can't Exclude User but Allow Others to Access




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
you don't currently have permission to access this folder
Hello, I am on my Laptop, i have 3.5 IDE Hard Disk which is quiet few years old, my some Pictures and data is stored on it, now i am looking for few pictures of mine, and few notepads, i try to connect it on my laptop by using 3.5 hard drive ide enclosure caddy. problem is i keep getting ''you...
General Discussion
You don't currently have permission to access this folder
Hi, Im having trouble accessing an external hard drive. It says this when i try to access C:\Users i can view the rest of the hard drive though. When i go to change ownership it goes through the files and gets stuck on one particular file 3/4 times now and wont get past the one folder. Any...
General Discussion
I don't have permission to access my C drive!
On my new win7 home 64bit system I wanted to share my drives so that it would work with my other winxp computer as well so I used the trick of assigning permission to "Everyone" on all my drives. This worked great (better than the homegroup). However today I decided it wasn't a great idea to share...
Network & Sharing
appropriate permission to access
In the attempt to run the setup of a program I get this: “Windows cannot access the specified device, path, or file. You may not have the appropriate permission to access the item.” I am the administrator. Usually, by right clicking the mouse, and selecting run as administrator, this...
Installation & Setup
Windows can't access file. May not have permission to access.
Hello, I am attempting to access an application.exe file on my desktop. Each time that I click on it the Windows message, "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item." pops up. I am the system administrator so this...
General Discussion
Permission&Access&User Acount Woes
Permission is just my newest trouble! My computer crashed some weeks ago, & I never received a solution; I have Windows 7 Home Premium on, 32 bit, on a Toshiba Satellite laptop. It replaces one that was stolen from me; no frills is fine, but I have had many troubles! I am in exams online in...
Performance & Maintenance


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 05:26.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App