How to grant one user access to a folder that is in a Security Group (in AD) that is denied access?

KOD-NT 1 Reputation point

So I have a folder on a server that has an explicit deny for a certain OU but want to give one person, that is in that OU, access to that folder. Is there a way to make a exception for that user or a way to override the deny that is in the security permissions for that specific user?

Using an on-premise DC.

Azure Files
Azure Files
An Azure service that offers file shares in the cloud.
1,223 questions
Microsoft Entra
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. kzar 86 Reputation points

    Hi, as far as I know, it is not possible. Restrictive permissions override lenient permissions.
    Even hard links will not help you with these questions.

    You can try to disable deny permission heritage on the upper folder and give a direct link for your user to the folders below. But it will reduce security for others too.

    1 person found this answer helpful.