Everyone has access to all shared folders

[Turritopsis Dohrnii Teo En Ming SG]

Good evening from Singapore,

I am trying to setup shared folders in Windows Server 2016 Standard.

This is a Domain Controller with Active Directory.

I created Organizational Units representing departments in an enterprise. I also created individual users in each organizational unit. Besides organizational units, I have also created global security groups representing departments in an enterprise as well. I have added users in each organizational unit to a global security group.

For example,

Engineering Organizational Unit <> Engineering Global Security Group

Finance Organizational Unit <> Finance Global Security Group

Marketing Organizational Unit <> Marketing Global Security Group

Sales Organizational Unit <> Sales Global Security Group

I created several folders in C:\Shares wanting to represent different departments in an enterprise.

For each shared folder, I go to Advanced Sharing and set Everyone to Full Control.

Then in NTFS Security permissions, i allowed Sales Global Security Group to access Sales Folder only and Marketing Global Security Group to access Marketing folder only.

It seems that I am doing things in the right way.

But in the end, everybody has access to every folder.

What is wrong? Please advise.

Thank you very much.

Continue reading...