Deny access to a network shared folder to users of ou1 using gpo

Question

I have two organizational units and want to deny access to a network shared folder for only ou2 users.How can I do that?

Answer 1

Hello seva hajdar, Thank you for posting in Q&A forum. The use of Group Policy Object (GPO) settings to deny access to network shared folders to users of specific organizational units (OUs) can be achieved through the following steps: Open the Group Policy Management Console (GPMC) Navigation to the organizational unit (OU) with Computer objects where you want to apply the policy. Right click on the OU and select "Create GPO" and link it here, then give the GPO a name. Then right-click on the newly created GPO and select "Edit". In Group Policy Management Editor, navigate to Computer Configuration ->Windows Settings ->Security Settings ->File System. Right click on the File System folder, then select "Add File or Folder", enter the path of the network shared folder you want to deny access to in the dialog box, and then click "OK". In the next dialog box (which may take some time to load), select the user or group whose access rights you want to deny, then select "Deny" and select all the permissions you want to block, such as "Full Control", "Modify", "Read and Execute", "Display folder content", "Read", "Write", and then click "OK". The above settings will deny the OU1 user you specified access to the specified network folder. In addition, if you only want to set access permissions for shared folders, you can right-click on the folder, select Properties>Security>Edit>Add, add the users in the OU or group with users in the OU you want to block access to in the dialog box, then click OK. You can deny or allow permissions. This method is more convenient and does not require the use of GPO. I hope the information above is helpful. If you have any questions or concerns, please feel free to let us know. Best Regards, Daisy Zhou

If the Answer is helpful, please click "Accept Answer" and upvote it.