Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Permissions Propogation on Shared Folder not Inheriting Correctly

Status
Not open for further replies.

quolo

IS-IT--Management
Dec 12, 2002
70
US
This seems like it'd be easy to troubleshoot, but I'm stumped.

I've got a remote Windows 2003 Server that a handful of users Remote Desktop into. They FTP files up to a shared folder and the idea is that any of them should have full read/write/execute permissions on any files put in the shared folder. Seems simple enough. Unfortunately, even though I thought I had permissions propagation set correctly, when a user puts a file into c:\Fileshare\Shared, only they or Administrators can use the file. Something's amiss.

So I have a shared folder called C:\Fileshare. Power Users are granted full control of this Share. That is to say, if I right-click C:\Fileshare and select Sharing, and then hit the Permissions button, I see that Power Users have Full Control checked.

One level below at C:\Fileshare\Shared, I have assigned Security permissions to allow Power Users to have everything but Full Control. That is to say, if I right-click on C:\Fileshare\Shared, go to the Security tab, and click on Power Users, I see everything but Full Control checked. I check Effective Permissions for Power Users and it's pretty much the same story.

So I create a file on my home computer, ftp it up to the server using my login (a member of the Administrators group), and remote desktop into the server as myself to move the file into C:\Fileshare\Shared. Then I exit remote desktop and re-remote desktop into the server as a non-administrator, but member of the Power Users group on the server. I navigate to C:\Fileshare\Shared and I can only open the file as Read-Only.

What might I be missing?
 
I neglected to mention that, for C:\Fileshare\Shared Security Permissions, I do indeed have the "Allow inheritable permissions to propagate..." box checked.
 
Think I got lucky and figured it out, actually.

The parent object in this case is, according to Microsoft's documentation, the container in which the document is created. As far as the server is concerned, the container in this case, and therefore the parent object whose permissions are inherited, is the permission structure of the ftp site as the file is ftp'd to the server.

So I added the Power User permissions as such to the Default FTP site in IIS and walla, the permissions I want are inherited as they are FTP'd to my server.

Sweetastic.
 
This has got nothing to do with your thread but I do like the word 'Sweetastic' and am going to use it at every available opportunity!!!! :)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top