Re: SBS 2003 Folder Share Permissions / Rights

Well I sorted it all out.

I gave the top level shared folder named "Apps" read/change Permissions and
removed all Security permissions from the share. Then for each sub folder I
removed all share permission from sub-folders and assigned each sub-folder
non-inheritable Security permissions for full control. Also I removed
Security permissions for the local Users group (after having removed
inheritable security permission). Now everything is behaving as desired,
all users able to see the share and the contents of sub folders but only
members of particular groups able to dig into the sub-folders (and the one
that are not members being told "access denied").

Only the share was created using the Server Manager. Windows Explorer was
used to assign security permission for the individual folders.

Perhaps there is a better way, so comments are still welcome, but this is
working.

Thank you.

"sbs2003" <sbs2002@xxxxxxxxxx> wrote in message
news:PVEme.9223$615.6868@xxxxxxxxxxx
>I am stuck on a permission/rights problem that I just escapes me.... I
>suspect that I am just being really thick about it. Your insight would be
>greatly appreciated.
>
> I am trying to create a folder on my new SBS 2003 machine that all users
> can see and that contains sub folders which have different group rights.
> Specifically I want a folder called "Apps" that I will have workstations
> map to as the "S" drive. In this "Apps" folder I want sub-folders such as
> "Accounting", "Word processing", "Etc" that are each assigned different
> group rights.
>
> I have assigned the local User group Read/Change Permissions to the Apps
> folder an it can indeed be seen by the users. I have assigned the
> sub-folder "Accounting" full control Permission for Administrators and the
> Accounting Group and have also assigned full control Security rights for
> the same groups. I even disabled inherited rights to the sub-folder and
> copied all settings down the tree (because I do not what all users to be
> able to even have read permissions to the contents of the sub-folder).
> When I test the users effective permissions at the Accounting folder level
> it says that the user has full control. However, the users does not have
> full control from the workstation. I believe that my problem is that I am
> connecting to the share at the top folder level and so the user is only
> being given the read rights from the top level folder and everything below
> that folder. It seems to disregard the rights assigned to the Accounting
> sub-folder.
>
> Please tell me what I am missing here, or more simply, what is the correct
> way to do this.
>
> I have also observe that the Permission settings and the Security rights
> are not consistent when viewed in Windows Explorer vs. when viewed in the
> Server Manager. Should I be working exclusively in Server Manager? I
> have updated the Permissions and Security via both methods to no avail.
>
> Many thanks.
>


.

Relevant Pages

  • Re: you need permission to perform this action
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... configure the global permissions for administrators. ... folder, because some folder permissions are changed by design, that's ... I did have the Administrator take ownership of the system32 folder, ...
    (microsoft.public.windows.server.general)
  • Re: Strange share rights problems
    ... This rights are for the SHARE PERMISSIONS ... This posting is provided "AS IS" with no warranties, and confers no rights. ... The problematic folder is the folder under drive X and is called ... Users who belongs to the STAFF belongs also to Domain Users. ...
    (microsoft.public.windows.server.general)
  • Re: Utility/report for effective NTFS rights for a single user/group?
    ... that can determine the effective NTFS rights for a user or a group? ... Technically Rights and Permissions are two distinct things in NT-class ... simplistic in that you have to evaluate each folder individually. ...
    (microsoft.public.windows.server.general)
  • Re: Security and Sharing
    ... When they are logged in locally only the filesystem permissions are ... allows to them provided that the share level permissions are not less. ... "read and file scan rights". ... If you want then to be able to read files and browse the folder structure ...
    (microsoft.public.security)
  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)