Share via


Set, view, change, or remove special permissions

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To set, view, change, or remove special permissions

  1. Right-click the object you want to set advanced or special permissions on, click Properties, and then click the Security tab.

  2. Click Advanced, and then do one of the following:

    To Do this

    Set special permissions for an additional group or user

    • Click Add.

    • In Enter than object name to select (examples), type the name of the user or group, and then click OK.

    View or change special permissions for an existing group or user

    Click the name of the group or user, and then click Edit.

    Remove an existing group or user and its special permissions

    Click the name of the group or user and then click Remove. If the Remove button is unavailable, clear the Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here check box, and then click Remove.

  3. In the Permissions box, select or clear the appropriate Allow or Deny check boxes.

  4. In Apply onto, click the folders or subfolders you would like these permissions to be applied to.

  5. To configure security so that the subfolders and files will not inherit these permissions, clear the Apply these permissions to objects and/or containers within this container only check box.

  6. Click OK, and then, in Advanced Security Settings for ObjectName, click OK.

Caution

  • If you select the Replace permission entries on all child objects with entries shown here that apply to child objects check box, then all subfolders and files will have all of their permission entries reset to those inheritable from the parent object. Once you click Apply or OK, you cannot undo this operation by clearing the check box.

Notes

  • To open Windows Explorer, click Start, point to All programs, point to Accessories, and then click Windows Explorer.

  • The Everyone group no longer includes the Anonymous Logon permission.

  • If you select the Inherit from parent the permission entries that apply to child objects. Include these with entries explicitly defined here check box, then this file or folder will inherit permission entries from the parent object.

  • You can only set permissions only on drives formatted to use NTFS.

  • If the check boxes under Permissions are shaded, the permissions are inherited from the parent folder.

  • To change permissions, you must be the owner or have been granted permission to do so by the owner.

  • Groups or users that have been granted Full Control for a folder can delete files and subfolders within that folder, regardless of the permissions that protect the files and subfolders.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

Permissions
Permissions for files and folders
Best practices for assigning permissions on Active Directory objects
Selecting where to apply permissions