Folder Permissions within a share

[smfichera]

I have a win 2003 Server

I have created a share called "divisionshares" which sits on the root of the data drive

Within that Share I have a folder called "Records"

Under Records I have a folder called "OverTime"

Under the Overtime folder are documents that should only be changed by supervisors and read by all in records.

I set the "divisionshares" Share Permissions to Everyone Change/Read

I set the Records folder security permissions to allow all those in Records to read/write

I then change the Overtime folder so it does not inherit permissions. I give the supervisors write access and others get read only access.

The supervisors can't write, modify, create new anything in this folder. I have done this before on other servers but this one will just not work.

any ideas?

 

[spi200]

Hi

Sounds like you have it right, but here a few things to watch out for.
1.If using share permissions, ensure there are no ntfs permissions which are over riding your settings.
2. Make sure your supervisors are not in any other group or do not appear elsewhere - remember most restrictive wins!
3. Ensure you did the step of making sure the rights did not flow down - Not inherited - I find this part is prone to error so read the screen carefully.
4. We always set our Share permissions to full controll and then only use ntfs permissions to secure folders - just less rights to deal with.

Good luck

Dave

 

[IllogicallyLogical]

What is the groups effective permissions on the folder? Right-click the folder >select Properites >select the Security tab >click Advanced >select the Effective Permissions tab >click Select to enter the name of the Group you are having problems with and then check out their effective permissions. Remember that when combining Share permissions with NTFS permissions, the most restrictive permission is what the user or group gets. If the user or group is given Write access on the Security tab and there name isn't even listed on the Share permissions tab, then they will be denied access because the Share permissions are the most restrictive because there were no permissions given.

Joey
CCNA, MCP, A+, Network+, Wireless#

 

[IllogicallyLogical]

Dave has offered some good tips. His tip #4 is very good advice when using NTFS and Share permissions to secure a share. Giving Full Control to the Everyone group for Share permissions and then controlling access with NTFS permissions will make troubleshooting effective permissions of users and groups alot easier.

Joey
CCNA, MCP, A+, Network+, Wireless#