Member of Admins but get User Permissions? 1

[mattloflin]

Hey guys, I'm working on permissions for my server and it's messing with me.

I have them ALL set except ONE folder.

Folder1 has the following permissions:

TQI_Admins - All
TQI_Users - Deny Read

I have a User (MLoflin) that is only in the group TQI_Admins however it's denying that user the Right to view the Folder1

so in summary:
Folder1 should be allowing MLoflin Full Control of that folder but it's denying him the right to see the contents.

He can see all the other folders and everything just fine.

This is a folder w/in a shared folder and the shared permissions on the main folder are all clicked to Allow.

Any ideas? I have tried deleting the user at about 9:30am this morning and it didn't help

I clicked off Read Deny so everyone had full permissions and it allowed MLoflin to view and stuff. However that user is not a member of that group.

The only group that person is a member of is TQI_Admins.

Help?!

- Matt

"Never Give a Sword to a Man Who Can't Dance

 

[tom2008]

Please post a full list of the permissions asscoiated with the folder. It sounds like the user is a member of a group that is denied access. For example is the user a member of the domain users group which is denied access?

Things to check:

1) On the security tab of the folder, click the advanced tab. On the effective permissions tab enter the username and see what NFTS permission are being applied. If there is no deny permission here then you have share permission problem.

2) Check the Share Permissions for everyone are set to full control. This way the security is handled purely by NTFS permisions.

3) Check the groups that are denied access to the folder and verify that the user in question is not a member of any of these groups.

 

[mattloflin]

K update:

I checked what you said, however all is well. It seems like there was a delay in the permissions kicking in?

I just changed them around to perfect my system to deleniate different folders to different people and it came up with access denied again, however i know I have them set right.

So new question: Is there usually a delay when setting permissions? If it gets in a loop can it take upto an hour to fix itself?

- Matt

"Never Give a Sword to a Man Who Can't Dance

 

[tom2008]

If users are explicitly defined then there is no delay, but if they are a member of domain security groups and the permissions have been assigned via these groups then they will not take effect until the user logs off and back on again.

Another possible cause would be if a users group membership was changed on one domain controller and replication of these changes hadnt occured to the users local DC.

 

[mattloflin]

That answers my questions!

- Matt

"Never Give a Sword to a Man Who Can't Dance