Click here to get back home

Remove List Folder access only?

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Remove List Folder access only? Peter 03-16-2006
Get Chitika Premium
Posted by Peter on March 16, 2006, 2:18 am
Please log in for more thread options
Hi,

I would like to set up a share such that files within the share can be read
from and written to, but at the same time disallow users from browsing files
within that folder.

In other words, if you try to browse the folder you won't have access - or
you just won't see any files. But if you have a UNC path to a file within
that share, you should be able to access that file directly.

I've tried the advanced button in the folder security tab, and tried various
combinations of "Apply onto" settings with no luck.

Is it possible to prevent directory browsing yet still allow file access
from within that directory?



Posted by S. Pidgorny on March 16, 2006, 4:08 am
Please log in for more thread options
Yep - deny read to the directory (resulting - cannot browse) and give users
permission to bypass traverse checking (see, for example,
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/528.mspx)

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

> Hi,
>
> I would like to set up a share such that files within the share can be
> read
> from and written to, but at the same time disallow users from browsing
> files
> within that folder.
>
> In other words, if you try to browse the folder you won't have access - or
> you just won't see any files. But if you have a UNC path to a file within
> that share, you should be able to access that file directly.
>
> I've tried the advanced button in the folder security tab, and tried
> various
> combinations of "Apply onto" settings with no luck.
>
> Is it possible to prevent directory browsing yet still allow file access
> from within that directory?
>
>



Posted by Roger Abell [MVP] on March 16, 2006, 8:44 am
Please log in for more thread options
Alternatively, and IMO more cleanly (I dislike use of Deny except
where there are no good alternatives), verify that Users is still granted
the User Right to Bypass Traverse Checking or that a custom group
you have defined for this purpose is.
Grant nothing to the folder for Users, or the group. They thus have
no permissions on the folder. Then, on the file grant Read.
Now, this may be modified.
On the folder one can grant Read for Files Only. This avoids the
need to grant to each file.
However, one then needs to grant for This Folder Only, the detail
right to Read Extended Attributes (not execute the folder and not
read data) and if one wants to avoid use of the Bypass Traverse
user rightthen also the detail right to Tranverse the folder.


> Hi,
>
> I would like to set up a share such that files within the share can be
> read
> from and written to, but at the same time disallow users from browsing
> files
> within that folder.
>
> In other words, if you try to browse the folder you won't have access - or
> you just won't see any files. But if you have a UNC path to a file within
> that share, you should be able to access that file directly.
>
> I've tried the advanced button in the folder security tab, and tried
> various
> combinations of "Apply onto" settings with no luck.
>
> Is it possible to prevent directory browsing yet still allow file access
> from within that directory?
>
>



Similar ThreadsPosted
Remove Administrator Rights from Folder in Win2k Server November 11, 2005, 9:44 am
Code to remove a user group from file or folder ACL March 22, 2006, 1:45 pm
Why Are List Folder / Read Data Combined? November 21, 2005, 10:45 pm
Everybody denied access to a folder June 19, 2006, 4:52 am
Anonymous folder access December 13, 2006, 9:14 pm
Deny folder access for administrators January 24, 2006, 4:28 am
users, groups, and access to a folder May 2, 2006, 11:17 pm
Audit file/folder access February 12, 2007, 10:52 am
Anonymous Access to Shared Folder November 5, 2007, 1:13 pm
Re: Windows 2003: Folder Access Denied October 25, 2005, 10:13 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap