S
stevenwhiting
We have server 2012 R2 datacenter R2 installed and are using this as a file server.
We have a folder shared on it that everyone can access. When I started the SHARE permissions were set to EVERYONE had full control. I've changed this to Authenticated Users, domain admins and administrators to have full control.
Logged onto the server as a domain admin. If I look at the SECURITY tab of any of the child folders I now get
You must be have Read permissions to view the properties of this object.
But I do, I'm a domain admin so what's going on?
I clicked Advanced and see
Permissions/Share/Auditing/Effective Access
I get same "You must be have Read permissions to view the properties of this object."
I click continue and see all the permissions.
If I go to Effective Access I get same permissions issue. Again just click Continue and I gain access.
If in this section I choose User/Group and choose my domain admin account and view effective access I see FULL CONTROL.
So I have full control. So why does it keep claiming I need read permissions!
I notice I can't see current owner of the folder (assume due to permissions, despite having full control).
In Permissions, I can manually add a person or group.
Further to this odd behaviour we get the following.
USER A is in Group RW
A folder exists called
HR
The permissions on the folder are Full Control to Group RW
Yet USER A can't see any files in that directory, despite being in the correct group and when checking effective permissions it will show they have full control.
The ONLY way I can now get USER A to have access to the HR folder is put that user in manually. So now under permissions you'll see Group RW and USER A. It looks messy, but again, despite USER A being in the Group RW which has fully control, the only way for them to be able to see anything appears to be to manually add them.
It's driving us nuts. Especially as this issue, the permissions failing to show issue, only shows itself when you RDP to the server. If you go to the file share from another machine and look at permissions, you get no odd issues. The only odd issue that still exists is the group issue. Again, despite the user being in a group that has full control and no deny permissions exist. They still can't access anything unless put in there individually, outside of the group.
Any ideas?
Continue reading...
We have a folder shared on it that everyone can access. When I started the SHARE permissions were set to EVERYONE had full control. I've changed this to Authenticated Users, domain admins and administrators to have full control.
Logged onto the server as a domain admin. If I look at the SECURITY tab of any of the child folders I now get
You must be have Read permissions to view the properties of this object.
But I do, I'm a domain admin so what's going on?
I clicked Advanced and see
Permissions/Share/Auditing/Effective Access
I get same "You must be have Read permissions to view the properties of this object."
I click continue and see all the permissions.
If I go to Effective Access I get same permissions issue. Again just click Continue and I gain access.
If in this section I choose User/Group and choose my domain admin account and view effective access I see FULL CONTROL.
So I have full control. So why does it keep claiming I need read permissions!
I notice I can't see current owner of the folder (assume due to permissions, despite having full control).
In Permissions, I can manually add a person or group.
Further to this odd behaviour we get the following.
USER A is in Group RW
A folder exists called
HR
The permissions on the folder are Full Control to Group RW
Yet USER A can't see any files in that directory, despite being in the correct group and when checking effective permissions it will show they have full control.
The ONLY way I can now get USER A to have access to the HR folder is put that user in manually. So now under permissions you'll see Group RW and USER A. It looks messy, but again, despite USER A being in the Group RW which has fully control, the only way for them to be able to see anything appears to be to manually add them.
It's driving us nuts. Especially as this issue, the permissions failing to show issue, only shows itself when you RDP to the server. If you go to the file share from another machine and look at permissions, you get no odd issues. The only odd issue that still exists is the group issue. Again, despite the user being in a group that has full control and no deny permissions exist. They still can't access anything unless put in there individually, outside of the group.
Any ideas?
Continue reading...