How to grant one user access to a folder that is in a Security Group (in AD) that is denied access?

KOD-NT 1 Reputation point
2020-06-23T02:13:03.423+00:00

So I have a folder on a server that has an explicit deny for a certain OU but want to give one person, that is in that OU, access to that folder. Is there a way to make a exception for that user or a way to override the deny that is in the security permissions for that specific user?

Using an on-premise DC.

Azure Files
Azure Files
An Azure service that offers file shares in the cloud.
1,213 questions
Microsoft Entra
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Konstantin Zarudaev 86 Reputation points
    2020-06-23T09:14:08.147+00:00

    Hi, as far as I know, it is not possible. Restrictive permissions override lenient permissions.
    Even hard links will not help you with these questions. https://helgeklein.com/blog/2009/05/hard-links-and-permissions-acls/

    You can try to disable deny permission heritage on the upper folder and give a direct link for your user to the folders below. But it will reduce security for others too.

    1 person found this answer helpful.