Stumbled upon a user does not belong to any user group, still have the Users set of permissions,

I give Apache has built a user: apc, and removes it from Users in the group, let the Apache service to Users to run, the Apache logs directory given write access, Apache installation directory gives the permissions to read and running, but forget to given read access to web root directory, start the service can run normally, and can be normal visit website, later research and found to be the Users groups of Users have read access to all the directory, if you disable the permissions of the Users, website cannot be visited, tried sersver 2003, so two versions of Windows server 2008 R2,

I've put the user apc removed from the Users, why change its permissions or follow the Users group? Is there a way to let the real from the Users access group?

CodePudding user response:

The above mentioned is apc user domain user? If it is, the default Domain of the Domain Users will be added to the client machine's local Users group, also has the authority to the Users group will be the default,

CodePudding user response:

Learning, help top ~ hope have a warrior can solve!

CodePudding user response:

reference 1st floor WarmSunshine7 response:

mentioned above are apc user domain user? If it is, the default Domain of the Domain Users will be added to the client machine's local Users group, also has the authority to the Users group will be the default,

Is not a domain user, it is the local users

CodePudding user response:

refer to the original poster wintany1983 response:

stumbled upon a user does not belong to any user group, still have the Users set of permissions,

I give Apache has built a user: apc, and removes it from Users in the group, let the Apache service to Users to run, the Apache logs directory given write access, Apache installation directory gives the permissions to read and running, but forget to given read access to web root directory, start the service can run normally, and can be normal visit website, later research and found to be the Users groups of Users have read access to all the directory, if you disable the permissions of the Users, website cannot be visited, tried sersver 2003, so two versions of Windows server 2008 R2,

I've put the user apc removed from the Users, why change its permissions or follow the Users group? Is there a way to let the real from the Users access group?

Can't!

Whoami do you use the built-in programs will know that lusrmgr. MSC is inaccurate,

Lusrmgr. After MSC delete users, with the user login

Net user % % username
Whoami/groups
Can see the BUILTIN \ Users still,

But if the delete users lusrmgr ensure that the user does not appear in the Windows environment in the range of the user interface,

CodePudding user response:

Read permissions can be forbidden, need inside file security options expressly forbidden access, or cancel the root directory permissions inheritance, then manually specify each folder access,