Permissions - Allow or Deny Users and Groups

I enabled share this folder for the sub-folder, set a user for the sub-folder by going Select Users or Groups > Advanced > Find Now; but when trying to access the sub-folder by another computer other then the host computer sharing the sub-folder I'm prompt that I don't have permission ?

It may be best to go ahead and create a thread for this in the Network and Sharing forum area to see what we can do to help there.

Debby said:

Hi! Should I deny privileges to all but myself, for maximum protection, on all of my files and folders and programs?

Hello Debby,

You wouldn't want to do that for everything since it could mistakenly deny access to something (ex: system or program) that needed it.

It's usually better to only deny access to specific items (ex: folder or file) instead.

Peter Pan said:

Hello all,
Still very useful 10 years later! Thank you.
By the way, I believe there's a typo in the tutorial:


Step 7. To Convert All Inherited Parent Permissions as Explicit for Object
NOTE: This will convert all of the inherited parent permission entries as explicit permissons (<not inherited>) instead for this "object name" under the Inherited From column.
A) Uncheck the Include inheritable permissions from the objects parent box. (see screenshot below step 4)
B) Click on the Remove button. (see screenshot below)

You should click on the Add button instead, shouldn't you? This looks like a copy and paste of the content related to step 6.

Furthermore, you mention few steps further: "Be sure to not deny permissions to or remove TrustedInstaller, LOCAL SERVICE, RESTRICTED, SERVICE, or SYSTEM permission entries if listed." What system accournts are "RESTRICTED" or "SERVICE" or were in Windows 7? Were you talking about "NETWORK SERVICE" and "Local system (network restricted)"? Thanks to clarifY;

Cheers

Hello Peter,

Thank you. It should have been "Add" and not "Remove" for step 7. It is has now been corrected.

If I remember correctly, the warning is for system groups and services.

Hello Brink,

Many thanks for your prompt reply. Regarding the Windows SIDs / Security Groups / Identities, names and labels have slightly evolved from Windows 2000 to Windows 10 / Windows Server 2019.

Here below are some Microsoft technical articles where I was able to found these generic identity labels as RESTRICTED, SERVICE and SYSTEM. Relations to special system users like TrustedInstaller or Local System are not always clear and may have changed over time. I will give it a closer look to clarifiy things in my head

Cheers.


Special Identities (Windows 10) - Microsoft 365 Security | Microsoft Docs
Understand Implicit Groups and Identities in Windows Server 2008 | Microsoft Docs
Security identifiers (Windows 10) - Microsoft 365 Security | Microsoft Docs
https://support.microsoft.com/en-us/...rating-systems

Peter Pan said:

Hello Brink,

Many thanks for your prompt reply. Regarding the Windows SIDs / Security Groups, Identities, names and labels have slightly evolved from Windows 2000 to Windows 10 / Windows Server 2019.

Here below are some Microsoft technical articles where I was able to found these generic identity labels as RESTRICTED, SERVICE and SYSTEM. Relations to special system users like TrustedInstaller or Local System are not always clear and may have changed over time. I will give it a closer look to clarifiy things in my head

Cheers.


Special Identities (Windows 10) - Microsoft 365 Security | Microsoft Docs
Understand Implicit Groups and Identities in Windows Server 2008 | Microsoft Docs
Security identifiers (Windows 10) - Microsoft 365 Security | Microsoft Docs
https://support.microsoft.com/en-us/...rating-systems

Thank you.