Setting NTFS permissions Correctly

Hi All,
I 'm having NTFS permission issues. I'm trying to lock down a folder on a
shared drive so that only one person will have access to it. However, when I
try to remove the domain users group, I get a notice pop-up saying something
about 'child objects' and 'inheriting'. There must be a standard way of
doing this, especially in SBS. Any help or advise would be really
appreciated.
-mike

Dave
Wed May 14 12:00:09 PDT 2008

Short answer: open the properties of the folder in question, go to the
Security tab, click Advanced. You'll see a check box to allow inheritable
permissions - clear that, and choose the Copy option in the resulting
pop-up. Click Apply and you'll be able to do whatever you want from there.
(Copy leaves the existing permissions in place rather than removing them).

Long answer: by default, folders inherit permissions from the parent. So
if you have d:\Folder, and in that you create d:\Folder\Subfolder, Subfolder
will automatically have the same permissions as Folder. This may or may not
be handy for folders, but it's great for files - normally, you'd want
everyone's folder permissions to copy down to the items within that folder.

You can search for "access control" and/or "inherit permissions" in Help on
the SBS for more info.


"Mike" <none> wrote in message news:erU6oMftIHA.5500@TK2MSFTNGP04.phx.gbl...
> Hi All,
> I 'm having NTFS permission issues. I'm trying to lock down a folder on a
> shared drive so that only one person will have access to it. However, when
> I try to remove the domain users group, I get a notice pop-up saying
> something about 'child objects' and 'inheriting'. There must be a standard
> way of doing this, especially in SBS. Any help or advise would be really
> appreciated.
> -mike
>

kj
Wed May 14 12:04:39 PDT 2008


Mike wrote:
> Hi All,
> I 'm having NTFS permission issues. I'm trying to lock down a folder
> on a shared drive so that only one person will have access to it.
> However, when I try to remove the domain users group, I get a notice
> pop-up saying something about 'child objects' and 'inheriting'. There
> must be a standard way of doing this, especially in SBS. Any help or
> advise would be really appreciated.
> -mike

Domain Users are assigned higher up. To remove them (it), you need to break
the inheritance and if necessary apply the new settings to the existing
files and sub folders.

--
/kj

Mike
Wed May 14 13:42:54 PDT 2008

Thanks Dave. What you wrote made alot of sense. I was able to accomplish
what I need to do.
best regards,
-mike


"Dave Nickason [SBS MVP]" <gwdibble@NOSPAM.frontiernet.net> wrote in message
news:D78BD98D-DCF0-46C1-A0AB-666CB054BF8B@microsoft.com...
> Short answer: open the properties of the folder in question, go to the
> Security tab, click Advanced. You'll see a check box to allow inheritable
> permissions - clear that, and choose the Copy option in the resulting
> pop-up. Click Apply and you'll be able to do whatever you want from
> there. (Copy leaves the existing permissions in place rather than removing
> them).
>
> Long answer: by default, folders inherit permissions from the parent. So
> if you have d:\Folder, and in that you create d:\Folder\Subfolder,
> Subfolder will automatically have the same permissions as Folder. This
> may or may not be handy for folders, but it's great for files - normally,
> you'd want everyone's folder permissions to copy down to the items within
> that folder.
>
> You can search for "access control" and/or "inherit permissions" in Help
> on the SBS for more info.
>
>
> "Mike" <none> wrote in message
> news:erU6oMftIHA.5500@TK2MSFTNGP04.phx.gbl...
>> Hi All,
>> I 'm having NTFS permission issues. I'm trying to lock down a folder on a
>> shared drive so that only one person will have access to it. However,
>> when I try to remove the domain users group, I get a notice pop-up saying
>> something about 'child objects' and 'inheriting'. There must be a
>> standard way of doing this, especially in SBS. Any help or advise would
>> be really appreciated.
>> -mike
>>
>