Our Windows 2000 Server has several shared folders. Everyone was given free reign to all of them, as this is a small company. Today, however, it was decided that the Accounting share should only be accessible by 5 of our users. So I add them to the share and login with a non-accessible username to make sure that I can't access. It worked. I was unable to gain access.
An hour later, a user came to me saying she couldn't use the MAS90 program, which happens to be in a subdirectory of Accounting. Boss told me to add two more users to Accounting, but to only give them permission to the MAS90 subfolder. "No problem," says I.
I set the MAS90 folder as a share and told it not to inherit parent permissions. Then I added the 5 + 2 users to the MAS90 share. No dice. None of the users could access it.
So then I set the MAS90 share to allow Everyone, just as a test. Nothing. Domain administrator accounts can't even view the contents of the directory! WTF?! I then noticed that the parent Accounting share was now set to allow access to Everyone, despite the fact the I explicitly told it to allow access to only five users just a half hour before and hadn't changed any of its settings, only those of the MAS90 (child) share.
So, since the Accounting share now said Everyone, I tried to log on to it from a domain admin account on another computer. NOW NOBODY COULD ACCESS THAT, EITHER, despite the Everyone designation which is there even though I didn't set it that way.
All of the other shares on the server allow access to everyone, and that's just what they're doing. They still work fine. The Accounting share worked fine this morning when it was set to Everyone. Now it's set to Everyone and it doesn't work. Ugh.
Could someone please tell me what's going on here? Preferably while I still have some hair left to pull out?
An hour later, a user came to me saying she couldn't use the MAS90 program, which happens to be in a subdirectory of Accounting. Boss told me to add two more users to Accounting, but to only give them permission to the MAS90 subfolder. "No problem," says I.
I set the MAS90 folder as a share and told it not to inherit parent permissions. Then I added the 5 + 2 users to the MAS90 share. No dice. None of the users could access it.
So then I set the MAS90 share to allow Everyone, just as a test. Nothing. Domain administrator accounts can't even view the contents of the directory! WTF?! I then noticed that the parent Accounting share was now set to allow access to Everyone, despite the fact the I explicitly told it to allow access to only five users just a half hour before and hadn't changed any of its settings, only those of the MAS90 (child) share.
So, since the Accounting share now said Everyone, I tried to log on to it from a domain admin account on another computer. NOW NOBODY COULD ACCESS THAT, EITHER, despite the Everyone designation which is there even though I didn't set it that way.
All of the other shares on the server allow access to everyone, and that's just what they're doing. They still work fine. The Accounting share worked fine this morning when it was set to Everyone. Now it's set to Everyone and it doesn't work. Ugh.
Could someone please tell me what's going on here? Preferably while I still have some hair left to pull out?
