Re: effective permission issue

From: Pegasus \(MVP\) (I.can_at_fly.com)
Date: 01/22/05 

Date: Sat, 22 Jan 2005 13:21:52 +1100

"BW" <BW@discussions.microsoft.com> wrote in message
news:D5376BED-3B1E-48E6-BFB3-437467743976@microsoft.com...
> Hi All,
>
> I have a folder that is shared on a win2k3 server used to hold info for
> staff. The share permissions is full control for everyone. The general
> Staff group has read access to this folder. This works fine and staff are
> able to read and access all docs. However a couple of sub folders require
> full control for a select number of staff (in a group called Admin). I
have
> added the admin group to ACL with full control, which includes read access
> for Staff group inherited from above.
>
> Now these admin group staff still cannot write. The only way I can get it
> to work is by removing staff group permissions (of which they are also a
> member) or giving staff group full control also. There is no deny ACL set
> and the effective permissions for admin group report as full control. Am
I
> missing something here? If any one can shed some light I be very
grateful.
>
> BW.

AFAIK, when you have ambiguous permissions, the more restrictive
permissions apply. While admin staff are members of the General
Staff group, they will have read-access only, regardless of any
other permissions that you apply/

Relevant Pages

  • Re: cant ping gateway IP address
    ... from workstations or server. ... Staff with Administrator permissions staff can access the net fine, ... other internal staff (Internet User and Domain User permissions) try to ... Internet User permission only users can access net. ...
    (microsoft.public.windows.server.sbs)
  • Re: Delegating AD Rights (Enable/Disable Accounts)
    ... user accounts in AD to non-admin staff so that they will be able to ... enable & disable guest accounts within a specific OU. ... or even any special permissions as ...
    (microsoft.public.windows.server.scripting)
  • effective permission issue
    ... The share permissions is full control for everyone. ... Staff group has read access to this folder. ...
    (microsoft.public.windows.server.general)
  • Re: Users must be administrator
    ... > currently trying to secure the network as we are taking on new staff. ... > The shared resources are all shared with permissions for Everyone/All ... > the file permissions and the share permissions and they all check out OK. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Strange share rights problems
    ... The effective rights of the combination of Shared and NTFS permissions are ... Have you tested this with all users from the Staff Group? ... Under the Security Tab> Advanced button - on the row for Staff, ...
    (microsoft.public.windows.server.general)