I have a windows 2008 server with file server role. Multiple shared folders are there, one for each group, so that each group has access to its own folder, but is denied access to other shared folders.
How do I go about granting access to users who belong to more than one group to all their respective folders ?
For example, if Group 1 has only access to Folder 1 and Group 2 has only access to Folder 2, how do a grant access to both Folder 1 and Folder 2 to a user that belongs to Group 1 and Group 2 ?
I haven't succeded so far and I've read that :
[...] if a user is a member of a group where full control is provided over a folder, and also a member of a second group where full control is specifically denied, the user will be denied full control regardless of the fact that it was granted in the first group.
(from TechTopia)
BlueCompute is right, but here is why:
'Deny' will usurp any 'grant' permissions, that is the point of deny permissions. By default a users dosn't have access to a resource it hasn't been granted access to. But if you grant it wide access and want to pin hole a resource and deny access, you use deny.