We want the user to be part of the SecA group. Our goal is that having admin privileges isn't enough to access. While no one is denied permission explicitly, not even Administrators are listed as having permission. The permissions grant full control of a folder to specific groups. Permissions according to that, but in practice whenever someone tries to access a folder they should have rights to, they are given 'Access is Denied'. So I set up the security groups, granted permissions, and tested them with the Effective Permissions feature. Recently, we wanted to start closingĭown access to certain folders - only those in the IT security group can access the Applications sub-folder and such. It's located on our server, running SBS 2008. We have a network share that everyone in our company has access to, called SharedFiles. I've been working on this off and on for weeks now, and I'm really getting nowhere.