File Sharing and Folder Permissions

[secureops]

Hi

I'm having a problem understanding file sharing and folder permissions on 2008. I'm experienced with working operating systems from NT 4.0 to 2003 so when I started setting up our only 2008 file server I was taken back by some of the changes they have implemented.

In this case I have a top level folder called USERS. In there I have about 25 user folders. Generally what I have done in the past is share out the top level to everyone with F/C and then I apply folder level permission to the individual folders only allowing the user to have full access. This has worked quite well in the past.

Now with 2008, this seems to be impossible to do. When I share out the top level folder with Everyone this then seems to drill down to the folders and I when I remove it from the individual folders Everyone then is removed from the top level folder making the access beyond the top is inaccessible.

I'm new to 2008 so I may be missing something quite easy.

Any help would be appreciated.

Thanks
Paul

 

[kmcferrin]

Keep in mind that there are Sharing permissions and file permissions. You have to have rights through both to access the files, modifying the file permissions should not affect the share permissions, and vice versa.

________________________________________
CompTIA A+, Network+, Server+, Security+
MCTS:Windows 7
MCTS:Hyper-V
MCTS:System Center Virtual Machine Manager
MCSE:Security 2003
MCITP:Enterprise Administrator

 

[secureops]

Hi

But let me ask you this: have they made changes to the way they are administer since 2003 Server?

It seems that when I set up a Share permission it becomes a file it drills down into the sub folders.

For example. I have a top level folder that is shared to everyone but I would like to have the subfolder to have specific access rights i.e. only a single user would have access to this folder.

When I do this the Everyone permission is added to the folder and is visible in both the Sharing tab and the Permissions tab.

In windows 2003; all we had to do was simply share out the top level to Everyone and then apply NTFS permissions to the sub folders and that was it. It seems that they have added some extra work or I am missing something.

Thanks for your reply.

Paul