Restrict access to folders on windows 7.

dobharweim

Honorable
Nov 24, 2013
3
0
10,510
Hello everybody,

I have a brief question on folder permissions in windows. I have set up 6 user accounts on a win7 P.C. (It's part of a project).

User's 1 & 2 are in User Group IS.
User's 3 & 4 are in User Group B.
User's 5 & 6 are in User Group C.
User 1 is also a member of an Administrators group, group D.

Each user group has to have a separate folder on a shared partition, so the partition has a folder A, B and C, with only the members of each group being able to access their own folder. I thought I could achieve this through creating 3 user groups in the mmc and setting the folder sharing setting accordingly, so I carried out the following steps.

1. Create a separate folder on the partition for each department, IS, B & C.
2. Create a separate folder within the department folder for each user, user 1 and 2 in folder IS, etc.
3. Right click on a department folder and select properties.
4. Under the sharing tab select advanced sharing.
KK8KC.jpg

5. On the next screen tick the share this folder box and click permissions.
6. On the next screen click add, on the next screen insert the group name you set for this department in the MMC, and click ok.
Midi9.jpg

7. Remove the permissions given to the group Everyone.
8. Ensure that the user group defined has explicit full permissions for this folder and click apply.

Unfortunately this isn't working out. When I log in as a member of group B, I can still access the folder IS.

Also I'm not sure how I can block group IS from accessing folders B and C, and allow user 1, who is a member of IS, access to folders B and C through her membership of group D? Surely if she is explicitly denied access as a member of group IS this will overwrite her access as a member of group D?

Please advise, and if you need any clarification just let me know.

Cheers,

Dave.
 
Solution
When looking at Computer Management are any of the users listed as an Administrator under users or groups? If so I believe being listed as an Administrator will by pass your local security group access rights. That's just a guess right now since I'm rushing out the door....

neieus

Distinguished
When looking at Computer Management are any of the users listed as an Administrator under users or groups? If so I believe being listed as an Administrator will by pass your local security group access rights. That's just a guess right now since I'm rushing out the door....
 
Solution

dobharweim

Honorable
Nov 24, 2013
3
0
10,510
Hi Neieus,

Thanks for your speedy reply but unfortunately that's not the issue. There are only two true administrator's accounts and neither of them are any of the users mentioned.

Thanks anyway.