Re: File sharing in W2k3



Oh I beg to differ if I am understanding your explaination correctly Doug.
What you are saying is "If the user or some group of which the user is a
member does not have write or better NTFS (Security) permissions on the
shared folder, then the user cannot have write access to a subfolder
accessed through the share."?

Parent Folder (SHARED as "Parent" with Group Everyone FULL CONTROL access at
the Parent share) NTFS Folder/File permissions are (Administrator-FULL
CONTROL/ System-FULL CONTROL / Eveyone-READ)
Sub Folder A - NTFS Folder/File permissions are (Administrator-FULL
CONTROL/ System-FULL CONTROL/ User GroupA-MODIFY / User GroupB/READ)
Sub Folder B - NTFS Folder/File permissions are (Administrator-FULL
CONTROL/ System-FULL CONTROL/ User GroupA-READ / User GroupB/MODIFY)

So given your explaination the above scenario would not be possible? As you
can see I assign "READ" only NTFS Foler/File permissions to the group
Everyone at the Parent share folder. So your telling us that I cannot assign
Modify access to User Group A or B to Sub Folder A or B as I did above?

"Doug Sherman [MVP]" <dsherman@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:uiNJPSFSGHA.5156@xxxxxxxxxxxxxxxxxxxxxxx
I guess it would have been clearer if I said: If the user or some group of
which the user is a member does not have write or better NTFS (Security)
permissions on the shared folder, then the user cannot have write access
to
a subfolder accessed through the share. This will not change even if you
give the user Full Control NTFS permissions on the subfolder and/or Full
Control Share permissions on the shared folder.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"Doug Sherman [MVP]" <dsherman@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:u0P9fu7RGHA.5908@xxxxxxxxxxxxxxxxxxxxxxx
Not enough information. If the group does not have write or better NTFS
(Security) permissions on the shared folder, then it will not have write
or
better access to a subfolder accessed through the share. This is so
regardless of what NTFS permissions are assigned to the subfolder.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"Andrew Hodgson" <me3@xxxxxxxxxxx> wrote in message
news:47fe12l8hl59jlejqata61jsiftao0ehp8@xxxxxxxxxx
Hi,

I have a directory which is shared on a Windows 2k3 standard box. I
don't wish people to be able to write to it, but I need people in a
Windows 2000 AD group to be able to write in a specific directory
below the share.

I shared the root folder on the drive using everyone giving them read
and write permissions. I then set the permissions on the specific
folder in the share so that the specific group had modify permissions.
However, it does not work.

The only way I could seem to get it to work was to give the everyone
group in the share full control then give the everyone user on the
root folder full control - then it appeared to work normally, however,
wish to tie it down.

I looked at the permissions on my solitary W2k3 box at home and they
seem very similar to how I had things set up, but this works and the
one at work doesn't.

Any suggestions?
Thanks.
Andrew.
--
Andrew Hodgson in Bromyard, Herefordshire, UK.
My Email: use <andrew at hodgsonfamily dot org>.






.



Relevant Pages

  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The fact that the tech support is based in India has nothing to do with the ... If so you may want to leave this folder alone. ... down to all children folders because i can set those permissions to ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Can No Longer Access Shares Remotely
    ... restrict the folder with NTFS permissions. ... to tight NTFS permissions on the shared folder, ... MCSE - Windows Server 2003 + MCP ...
    (microsoft.public.windows.server.networking)
  • Re: Can No Longer Access Shares Remotely
    ... Are you 100% sure of that it's not any permissions you have forgot to set on ... restrict the folder with NTFS permissions. ... to tight NTFS permissions on the shared folder, ... MCSE - Windows Server 2003 + MCP ...
    (microsoft.public.windows.server.networking)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The only computers i fix are my own. ... If so you may want to leave this folder alone. ... it includes all subdirectories with inherited permissions. ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)