A complete re write of my previous question, in a different context.

Basically, the issue is that when I create a new user within a new group, the new user has various permissions over various folders.

I have deleted the group "users" from this user object, and it is simply a member of the group "test".

I have created a folder called c:\foo, when I go to effective permissions under the security tab, I can see that the user "lockdown" has various permissions.

As far as I can see, there is nothing that should allow lockdown access.

The moment I remove users from this list, it behaves as I would expect, which makes me believe that for some strange reason, the users group behaves like the everyone group and is controlled by the system. That being said, I cannot understand this as under the list, it is not there - and further to this, with the same permissions as the first picture, guest does not have access.

This has stumped me and any help is appreciated!

(Tested in Windows 2003 and 2008)

edit - Should also say that if I go to Effective Permission for the group the user is in, there are no boxes checked, so it is somehow just the user that is getting the permissions from somewhere.