Re: Share Permission on Windows 2003 R2 Member Server

"agustin" <agustin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A62E6450-C999-4626-BD31-2732DD4B97CE@xxxxxxxxxxxxxxxx
Thanks Herb

Yes, I did setup the permission manually in the way that I wanted to be
and
now is ok. But how can I do it automaticly; when I create a user in the
user
properties-profile option/home folder/connect option, I have
\\fileserver\profiles$\%username% but still even if I had unchecked the
option not propagate with inheritance, the folder is created base on the
parent folder permision.


The 'Inheritance' check box is for THIS object (FROM it's
parent).

When a new object is created it ALWAYS* inherits from the
parent, and this includes having inheritance (checkbox) enable,
unless and until you disable that inheritance.

*There is a weird but practically unknown way to change the
inherited settings at the parent but this doesn't effect that
child objects are born with those settings.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

"Herb Martin" wrote:

Let explain again:

I have a folder called Profiles on my member server (file server),
inside
that folder, I will have all my domain users home folder. The profiles
folder will be share as profiles, I want each user to have full access
just
to their own folder, so how I control that user A can not open the
homefolder
of user B.

That reasonable and no big deal. Permissions on
one folder do NOT affect the users access to another
profile. (Unless we are talking parent-child AND
you propagate with inheritance enabled.)

Set the permissions for each user (seperately) on
their own folder, and just don't give that user access
to anyone else's folder (directories really.)

Access to parent directories is not really important
(as long as you override any problems at the child
level) AND "browsing" is not an issue (since browsing
resources requires at least read on the parent.)

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

"agustin" <agustin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:055D679A-D5A0-4900-8388-CA197E9786E3@xxxxxxxxxxxxxxxx
thanks Herb

Let explain again:

I have a folder called Profiles on my member server (file server),
inside
that folder, I will have all my domain users home folder. The profiles
folder will be share as profiles, I want each user to have full access
just
to their own folder, so how I control that user A can not open the
homefolder
of user B.


"Herb Martin" wrote:

"agustin" <agustin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:964786F3-F3BA-40E8-9438-15FD79B6B997@xxxxxxxxxxxxxxxx
Thanks Herb for reply,,

let me explain better my situation:
I have a home folder called profile where all my users have their
own
folder
with full access just to the owner. how I control for example: user
A
can
not open the folder for user B and viceverse..
thanks again


That's still not very clear and it definitely has no effect
on my previous answer.

Remember also, that in most cases the owner of a
resource can change the permissions as can anyone
with full control -- IF they can exercise that permisssion
either locally or by having the equivalent on the share
they use.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]


"Herb Martin" wrote:

"agustin" <agustin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A4E1BD53-A2EB-4F6D-AC50-7E0AC399EDBC@xxxxxxxxxxxxxxxx
Hi all,,
I am receiving access denied on a share folder where the owner
user
has
full
access. Can you let me know a KB that can help me to solve this.
My member server and the DC are running windows 2003 R2 Standard
ED.


For Share access the user must have access BOTH at the
Share Level and at the NTFS (file) level on the specific
file(s) requested.

The user must furthermore NOT be included in any group
that is DENIED the particular (set of) access desired on
either the Share or the NTFS permissions.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

Antonio












.

Relevant Pages

  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The fact that the tech support is based in India has nothing to do with the ... If so you may want to leave this folder alone. ... down to all children folders because i can set those permissions to ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Permissions in XP Professional
    ... > Although I have Administrator rights on a PC running XP Professional, ... access to files where the permissions grant the access. ... In the Security tab of the parent folder's ... In the Advanced Security Settings for the parent folder ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Please help, used folder redirection, now roaming profiles won
    ... account to the ACL of the folder? ... Saturday I decided to try and used the redirect folders option so ... to deny access so everyone could not look at each other's profiles. ... The basics of profile folder permissions: ...
    (microsoft.public.windows.server.sbs)
  • Re: Permissions in XP Professional
    ... > unable to gain access to a user's account. ... access to files where the permissions grant the access. ... In the Security tab of the parent folder's ... In the Advanced Security Settings for the parent folder ...
    (microsoft.public.windowsxp.security_admin)