Re: folder access

From: Pegasus (I.can_at_fly.com)
Date: 07/19/04


Date: Mon, 19 Jul 2004 18:43:06 +1000


"PETER M" <PETER M@discussions.microsoft.com> wrote in message
news:BFB6ECEF-6E72-4FB9-BC41-577753E370ED@microsoft.com...
> I have a newly built Windows 2000 Server. A folder is copied on the
root of the E:\ drive. So now there is a E:\ConveyData folder created.
After this the ConveyData folder is shared as ConveyData and share level
permissions with Change rights are given to 2 NT groups. Let's say GroupA
and GroupB. These are the only groups on the share level permissions, the
everyone group is taken out. After that, the same groups (GroupA, GroupB)
are given NTFS level permissions as well with Change rights as well on the
E:\ConveyData folder. There are other groups listed on the NTFS permissions
on the E:\ConveyData folder but non are Deny access or at least they have
read permissions.
>
> Now, a user that I know is part of the at least GroupB tries to connect
to the share \\server\ConveyData and can map a drive to the share but gets
access denied. Why is that? GroupB has change rights on both Share and NTFS
levels. Effective rights for the group (GroupB) on the ConveyData folder
are correct "Change".
> If I place his ID only on the share and NTFS he works. Also if I place
the everyone group with read on either Share or NTFS and take out his user
id he works as well.
>

Since NTFS permissions are far more powerful than share permissions, I
recommend that you set the share permissions to "Full" for everybody, then
apply your restrictions by means of NTFS permissions.



Relevant Pages

  • Re: Q.) NTFS rights - How to Append NTFS assignments
    ... The Share is setup to Everyone with Full access and the NTFS ... security restricts the permissions to only those authorized. ... via NTFS from the parent folder being requested to change - however I ... permissions on subfolders, set up different *shares* for your departments.. ...
    (microsoft.public.windows.server.sbs)
  • Re: Folder Access Restriction
    ... I found out that I am using NTFS system. ... Now are you suggesting that I click on the box in the second line titled as ... 'Share this folder' .....> ... In the Share Permissions Dialog Box, I can see the Group or user name = ...
    (microsoft.public.windowsxp.general)
  • Re: Utility/report for effective NTFS rights for a single user/group?
    ... that can determine the effective NTFS rights for a user or a group? ... Technically Rights and Permissions are two distinct things in NT-class ... simplistic in that you have to evaluate each folder individually. ...
    (microsoft.public.windows.server.general)
  • Re: Passwords
    ... Run diskmgmt.msc via Start/Run. ... Click Start/Help and look for "Permissions" to see how ... Is there a way to put a password on a folder, ... If the folder resides on an NTFS volume then you can control ...
    (microsoft.public.win2000.file_system)
  • Re: Passwords
    ... Click Start/Help and look for "Permissions" to see how ... is it Windows NT for the nt part, if that's the case we don't have ... Is there a way to put a password on a folder, ... If the folder resides on an NTFS volume then you can control ...
    (microsoft.public.win2000.file_system)