Re: File sharing in W2k3

You can always "assign" any NTFS permissions you want. However, in your
scenario users who access subfolders through the Share (Parent) will never
have better than Read access unless they are also members of the
Administrators group.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"AllenM" <allen.miyake@xxxxxxxxx> wrote in message
news:eF5fSkFSGHA.424@xxxxxxxxxxxxxxxxxxxxxxx
Oh I beg to differ if I am understanding your explaination correctly Doug.
What you are saying is "If the user or some group of which the user is a
member does not have write or better NTFS (Security) permissions on the
shared folder, then the user cannot have write access to a subfolder
accessed through the share."?

Parent Folder (SHARED as "Parent" with Group Everyone FULL CONTROL access
at
the Parent share) NTFS Folder/File permissions are (Administrator-FULL
CONTROL/ System-FULL CONTROL / Eveyone-READ)
Sub Folder A - NTFS Folder/File permissions are (Administrator-FULL
CONTROL/ System-FULL CONTROL/ User GroupA-MODIFY / User GroupB/READ)
Sub Folder B - NTFS Folder/File permissions are (Administrator-FULL
CONTROL/ System-FULL CONTROL/ User GroupA-READ / User GroupB/MODIFY)

So given your explaination the above scenario would not be possible? As
you
can see I assign "READ" only NTFS Foler/File permissions to the group
Everyone at the Parent share folder. So your telling us that I cannot
assign
Modify access to User Group A or B to Sub Folder A or B as I did above?

"Doug Sherman [MVP]" <dsherman@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:uiNJPSFSGHA.5156@xxxxxxxxxxxxxxxxxxxxxxx
I guess it would have been clearer if I said: If the user or some group
of
which the user is a member does not have write or better NTFS (Security)
permissions on the shared folder, then the user cannot have write access
to
a subfolder accessed through the share. This will not change even if
you
give the user Full Control NTFS permissions on the subfolder and/or Full
Control Share permissions on the shared folder.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"Doug Sherman [MVP]" <dsherman@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message
news:u0P9fu7RGHA.5908@xxxxxxxxxxxxxxxxxxxxxxx
Not enough information. If the group does not have write or better
NTFS
(Security) permissions on the shared folder, then it will not have
write
or
better access to a subfolder accessed through the share. This is so
regardless of what NTFS permissions are assigned to the subfolder.

Doug Sherman
MCSE, MCSA, MCP+I, MVP

"Andrew Hodgson" <me3@xxxxxxxxxxx> wrote in message
news:47fe12l8hl59jlejqata61jsiftao0ehp8@xxxxxxxxxx
Hi,

I have a directory which is shared on a Windows 2k3 standard box. I
don't wish people to be able to write to it, but I need people in a
Windows 2000 AD group to be able to write in a specific directory
below the share.

I shared the root folder on the drive using everyone giving them read
and write permissions. I then set the permissions on the specific
folder in the share so that the specific group had modify
permissions.
However, it does not work.

The only way I could seem to get it to work was to give the everyone
group in the share full control then give the everyone user on the
root folder full control - then it appeared to work normally,
however,
wish to tie it down.

I looked at the permissions on my solitary W2k3 box at home and they
seem very similar to how I had things set up, but this works and the
one at work doesn't.

Any suggestions?
Thanks.
Andrew.
--
Andrew Hodgson in Bromyard, Herefordshire, UK.
My Email: use <andrew at hodgsonfamily dot org>.








.

Relevant Pages

  • Re: Q.) NTFS rights - How to Append NTFS assignments
    ... The Share is setup to Everyone with Full access and the NTFS ... security restricts the permissions to only those authorized. ... via NTFS from the parent folder being requested to change - however I ... permissions on subfolders, set up different *shares* for your departments.. ...
    (microsoft.public.windows.server.sbs)
  • Re: Folder Access Restriction
    ... I found out that I am using NTFS system. ... Now are you suggesting that I click on the box in the second line titled as ... 'Share this folder' .....> ... In the Share Permissions Dialog Box, I can see the Group or user name = ...
    (microsoft.public.windowsxp.general)
  • Re: Utility/report for effective NTFS rights for a single user/group?
    ... that can determine the effective NTFS rights for a user or a group? ... Technically Rights and Permissions are two distinct things in NT-class ... simplistic in that you have to evaluate each folder individually. ...
    (microsoft.public.windows.server.general)
  • Re: FTP Newbie Question
    ... OK, I have the folder created, but I don't know what you mean by "use ... I have assigned NTFS file permissions to give the group ... Isolation Mode has not been configured. ... Keep the anonymous account out of the NTFS ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: WinXP home edition file permissions
    ... If your hard disk/partition is not NTFS you will need to convert ... In Windows Explorer, go to Tools, Folder Options, View and uncheck ... Here you can assign or deny permissions based on user name or user ... Set, View, Change, or Remove File and Folder Permissions in Windows ...
    (microsoft.public.windowsxp.security_admin)