If I create a file (TestFile.txt) as an non-admin user in a folder that user has full rights to, then deny all access to that file from the server as an admin, the user can no longer modify, copy, rename, etc, but for some reason is still allowed to delete the file....
Here's the output from the icacls command:
TestFile.txt STATE\CV0228U:(N) STATE\CV0228U:(I)(M,WDAC,DC) STATE\CV0228U:(I)(F) NT AUTHORITY\SYSTEM:(I)(F) BUILTIN\Administrators:(I)(F) STATE\DOA MPERA Staff:(I)(S,RD,X,RA)
I thought 'Deny' took precedence over all other rights implicit or inherited? Thanks