New
#1
Permission Puzzle: Can't Exclude User but Allow Others to Access
Hi All,
This is my first post here. I am trying hard to solve this permissions problem on my own--with lots of research, but I am truly stumped and I hope you can help.
Here is the overview:
I have FIVE PC's networked to a server, FOUR of them through Homegroup and FIFTH PC outside Homegroup. I want to exclude the FIFTH PC from all folders on the FOUR PC's and FOUR of the FIVE folders on the server. The FOUR PC's will have everything BUT Full Control access to the FIVE other folders on the server, but the FIFTH PC will be totally excluded from FOUR of those folders. with everything BUT Full Control over the FIFTH folder. These FIVE folders are on the "J" drive on the server, under a parent folder called "Network Shared Folders."
I learned that if you, or a group you belong to, have share permissions AND NTFS rights, you can browse into the share. I also learned that if you, or the group you belong to, are ONLY on the NTFS, you cannot browse into the share AND you cannot access any folders beneath the share, even if you have rights to them. The two other applicable rules: 1) when combining NTFS permissions and share permissions, the most restrictive effective permission applies and 2) permissions are combined when a user is not explicitly denied access. Finally, you should avoid using the "Deny" permission if possible.
When I set the share and NTFS permissions according to those rules, I either get all the PC's excluded from the folder,OR all the PC's are included. I think it has to do with my inability to place, omit or include "Everyone" in the proper place in the share permissions and NTFS, and setting the inheritance correctly. I noticed that if I set "Everyone" in Shared Permissions, it automatically appears in NTFS Permissions. I can't set it in one, but not the other, even if I remove inheritance from above.
Currently, I have the following permission settings which are not working properly because it allows User 5 to access Folders 1-4:
Any help would be greatly appreciated. Thanks.