Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Security group perms not applying, Effective permissions says its OK

Status
Not open for further replies.

ploughingon

Technical User
Jul 3, 2006
21
GB
Hi,

I've got one domain server (w2k3) thats giving me trouble. I've set up a share (Share perms Everyone Full control) and I've been trying to tie it down with NTFS perms. But there's something squiffy.
Named individuals , perms apply OK
Builtin groups , perms apply OK
Global securtiy groups , perms ignored.

the share is no inheriting any permissions and the effective perms tool says "Yup that user has full control" , but when user in the Global security group tries to access said share its access denied.

I setup a share on another machine and played around, everything is fine there
 
Ok , its now after lunch and its working.

I know what this looks like, but it really was as dexcribed

I've never seen a delay like this before, has anyone else experienced this?

 
I have just had basically the same issue however it was with a built-in security group; namely "Administrators". I guess that I will wait the fifteen minutes that my repl is set to for my clean-up project and see what happens but this is regarding local perm changes only so it shouldn't matter as far as I know. I will post again after the changes either take or fail. I have recently removed the indiv admin user object and added the administrator group that it belongs to. This has effectively caused the admin user object to lose its authority over the resource.
 
OK. I have waited the 15 minutes and have found that I hosed-up the perms and gave the admins access to the top dir only. I took ownership of the whole kit and caboodle and fixed my issue by washing full control through the entire directory... I guess that means that the reader should disregard my previous entry due error based on too much turkey last night.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top