[NTFS ACL Security]How can I open a folder with the user account is not in the group of the folder. I want to protect the folder without Deny in ACL

[difficulti]

Hello.

I am testing a folder security settings (NTFS) on Windows.

The folder has no security settings about aaa-test group

However a user in the group can access the folder without any problem.


Which one do I need to set for the group is not be able to access the folder without Deny setting?

(Because there are a lot of other folders, it is impossible for each folder to set Deny )


Here is the detail testing information.


1. First, I created an aaa account in Users, and this account is in the aaa-test group.



2. Create a folder "Deny-aaa_group". There are only 3 groups can open the folder (Authenticated users, SYSTEM, Administrators)




3. However, if you log in with the aaa account and try to access the folder, The folder can be opened with aaa account




Please tell me a solution. I have been struggling for hours because of this.

Continue reading...