Security - Folder permissions - Inheritance

[deca300]

Hi guys

I am sitting with a tricky task. I really hope someone will be able to help me or give me some advice.
Let me explain the problem.

On my network I have a shared folder (this contains all users folders - Permissions Everyone)
Yes I know its not smart, but it was done a long time ago when things were still small.

So say this is the folder structure:

\\Shared\users\east coast\onsite\support\printing\jetdirect\

So because the Shared root folders permissions is set to - everyone. All the users I have on AD can access everything.

Now the thing is I don't want some people to have access to the -printing folder anymore.
BUT, the top root "shared" folders permissions is set to everyone. And I cant change permission at this level, it will cause too much issues with other child folders.

any help people

 

[AstroTurf]

OS folder is on, OS used by users etc may help?

 

[dabean]

Explicit permissions take precedence over inherited permissions, even inherited Deny permissions.

You should be able to deny specific users access to that folder, have you tried it yet?

 

[TheGuy]

Explicit permissions take precedence over inherited permissions, even inherited Deny permissions.

You should be able to deny specific users access to that folder, have you tried it yet?

This is it just add the users to the specific folder and deny them. Bit of a messy solution I would suggest you sort it out from scratch as the more the data grow the worse your problems are going to get.

 

[AstroTurf]

I normally just create a couple of groups then add users to the groups as needed.

 

[Tim the Techxpert]

Hi There,
I am with TheGuy. Sort it out now before you land up with a monster that is difficult to control.
Thanks dabean for the reference. a good description of how it works and what you can do.

Regards

Tim

 

[deca300]

Thanks for the reply guys

I will try dabean's solution in the week. I wish I could do it over from scratch but there is just to much complications... that can be caused for other users... But Ill see where I get with this first.